CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12525

An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searches for certain tokens such as domain, uri, and qop. Squid checks if this token's value starts with a quote and ends with one. If so, it performs a memcpy of its length minus 2. Squid never checks whether the value is just a single quote (which would satisfy its requirements), leading to a memcpy of its length minus 1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.465

EPSS Ranking 97.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-12525

Squid-Cache » Squid » Version: 3.3.10

cpe:2.3:a:squid-cache:squid:3.3.10
Squid-Cache » Squid » Version: 3.3.11

cpe:2.3:a:squid-cache:squid:3.3.11
Squid-Cache » Squid » Version: 3.3.12

cpe:2.3:a:squid-cache:squid:3.3.12
Squid-Cache » Squid » Version: 3.3.13

cpe:2.3:a:squid-cache:squid:3.3.13
Squid-Cache » Squid » Version: 3.3.14

cpe:2.3:a:squid-cache:squid:3.3.14
Squid-Cache » Squid » Version: 3.3.9

cpe:2.3:a:squid-cache:squid:3.3.9
Squid-Cache » Squid » Version: 3.4.0.1

cpe:2.3:a:squid-cache:squid:3.4.0.1
Squid-Cache » Squid » Version: 3.4.0.2

cpe:2.3:a:squid-cache:squid:3.4.0.2
Squid-Cache » Squid » Version: 3.4.0.3

cpe:2.3:a:squid-cache:squid:3.4.0.3
Squid-Cache » Squid » Version: 3.4.0.4

cpe:2.3:a:squid-cache:squid:3.4.0.4
Squid-Cache » Squid » Version: 3.4.1

cpe:2.3:a:squid-cache:squid:3.4.1
Squid-Cache » Squid » Version: 3.4.10

cpe:2.3:a:squid-cache:squid:3.4.10
Squid-Cache » Squid » Version: 3.4.11

cpe:2.3:a:squid-cache:squid:3.4.11
Squid-Cache » Squid » Version: 3.4.12

cpe:2.3:a:squid-cache:squid:3.4.12
Squid-Cache » Squid » Version: 3.4.13

cpe:2.3:a:squid-cache:squid:3.4.13
Squid-Cache » Squid » Version: 3.4.14

cpe:2.3:a:squid-cache:squid:3.4.14
Squid-Cache » Squid » Version: 3.4.2

cpe:2.3:a:squid-cache:squid:3.4.2
Squid-Cache » Squid » Version: 3.4.3

cpe:2.3:a:squid-cache:squid:3.4.3
Squid-Cache » Squid » Version: 3.4.4

cpe:2.3:a:squid-cache:squid:3.4.4
Squid-Cache » Squid » Version: 3.4.4.1

cpe:2.3:a:squid-cache:squid:3.4.4.1
Squid-Cache » Squid » Version: 3.4.4.2

cpe:2.3:a:squid-cache:squid:3.4.4.2
Squid-Cache » Squid » Version: 3.4.5

cpe:2.3:a:squid-cache:squid:3.4.5
Squid-Cache » Squid » Version: 3.4.6

cpe:2.3:a:squid-cache:squid:3.4.6
Squid-Cache » Squid » Version: 3.4.7

cpe:2.3:a:squid-cache:squid:3.4.7
Squid-Cache » Squid » Version: 3.4.8

cpe:2.3:a:squid-cache:squid:3.4.8
Squid-Cache » Squid » Version: 3.4.9

cpe:2.3:a:squid-cache:squid:3.4.9
Squid-Cache » Squid » Version: 3.5

cpe:2.3:a:squid-cache:squid:3.5
Squid-Cache » Squid » Version: 3.5.0.1

cpe:2.3:a:squid-cache:squid:3.5.0.1
Squid-Cache » Squid » Version: 3.5.0.2

cpe:2.3:a:squid-cache:squid:3.5.0.2
Squid-Cache » Squid » Version: 3.5.0.3

cpe:2.3:a:squid-cache:squid:3.5.0.3
Squid-Cache » Squid » Version: 3.5.0.4

cpe:2.3:a:squid-cache:squid:3.5.0.4
Squid-Cache » Squid » Version: 3.5.1

cpe:2.3:a:squid-cache:squid:3.5.1
Squid-Cache » Squid » Version: 3.5.10

cpe:2.3:a:squid-cache:squid:3.5.10
Squid-Cache » Squid » Version: 3.5.11

cpe:2.3:a:squid-cache:squid:3.5.11
Squid-Cache » Squid » Version: 3.5.12

cpe:2.3:a:squid-cache:squid:3.5.12
Squid-Cache » Squid » Version: 3.5.13

cpe:2.3:a:squid-cache:squid:3.5.13
Squid-Cache » Squid » Version: 3.5.14

cpe:2.3:a:squid-cache:squid:3.5.14
Squid-Cache » Squid » Version: 3.5.15

cpe:2.3:a:squid-cache:squid:3.5.15
Squid-Cache » Squid » Version: 3.5.16

cpe:2.3:a:squid-cache:squid:3.5.16
Squid-Cache » Squid » Version: 3.5.17

cpe:2.3:a:squid-cache:squid:3.5.17
Squid-Cache » Squid » Version: 3.5.18

cpe:2.3:a:squid-cache:squid:3.5.18
Squid-Cache » Squid » Version: 3.5.19

cpe:2.3:a:squid-cache:squid:3.5.19
Squid-Cache » Squid » Version: 3.5.2

cpe:2.3:a:squid-cache:squid:3.5.2
Squid-Cache » Squid » Version: 3.5.20

cpe:2.3:a:squid-cache:squid:3.5.20
Squid-Cache » Squid » Version: 3.5.21

cpe:2.3:a:squid-cache:squid:3.5.21
Squid-Cache » Squid » Version: 3.5.22

cpe:2.3:a:squid-cache:squid:3.5.22
Squid-Cache » Squid » Version: 3.5.23

cpe:2.3:a:squid-cache:squid:3.5.23
Squid-Cache » Squid » Version: 3.5.24

cpe:2.3:a:squid-cache:squid:3.5.24
Squid-Cache » Squid » Version: 3.5.25

cpe:2.3:a:squid-cache:squid:3.5.25
Squid-Cache » Squid » Version: 3.5.26

cpe:2.3:a:squid-cache:squid:3.5.26
Squid-Cache » Squid » Version: 3.5.27

cpe:2.3:a:squid-cache:squid:3.5.27
Squid-Cache » Squid » Version: 3.5.28

cpe:2.3:a:squid-cache:squid:3.5.28
Squid-Cache » Squid » Version: 3.5.3

cpe:2.3:a:squid-cache:squid:3.5.3
Squid-Cache » Squid » Version: 3.5.4

cpe:2.3:a:squid-cache:squid:3.5.4
Squid-Cache » Squid » Version: 3.5.5

cpe:2.3:a:squid-cache:squid:3.5.5
Squid-Cache » Squid » Version: 3.5.6

cpe:2.3:a:squid-cache:squid:3.5.6
Squid-Cache » Squid » Version: 3.5.7

cpe:2.3:a:squid-cache:squid:3.5.7
Squid-Cache » Squid » Version: 3.5.8

cpe:2.3:a:squid-cache:squid:3.5.8
Squid-Cache » Squid » Version: 3.5.9

cpe:2.3:a:squid-cache:squid:3.5.9
Squid-Cache » Squid » Version: 4.0

cpe:2.3:a:squid-cache:squid:4.0
Squid-Cache » Squid » Version: 4.0.1

cpe:2.3:a:squid-cache:squid:4.0.1
Squid-Cache » Squid » Version: 4.0.10

cpe:2.3:a:squid-cache:squid:4.0.10
Squid-Cache » Squid » Version: 4.0.11

cpe:2.3:a:squid-cache:squid:4.0.11
Squid-Cache » Squid » Version: 4.0.12

cpe:2.3:a:squid-cache:squid:4.0.12
Squid-Cache » Squid » Version: 4.0.13

cpe:2.3:a:squid-cache:squid:4.0.13
Squid-Cache » Squid » Version: 4.0.14

cpe:2.3:a:squid-cache:squid:4.0.14
Squid-Cache » Squid » Version: 4.0.15

cpe:2.3:a:squid-cache:squid:4.0.15
Squid-Cache » Squid » Version: 4.0.16

cpe:2.3:a:squid-cache:squid:4.0.16
Squid-Cache » Squid » Version: 4.0.17

cpe:2.3:a:squid-cache:squid:4.0.17
Squid-Cache » Squid » Version: 4.0.18

cpe:2.3:a:squid-cache:squid:4.0.18
Squid-Cache » Squid » Version: 4.0.19

cpe:2.3:a:squid-cache:squid:4.0.19
Squid-Cache » Squid » Version: 4.0.2

cpe:2.3:a:squid-cache:squid:4.0.2
Squid-Cache » Squid » Version: 4.0.20

cpe:2.3:a:squid-cache:squid:4.0.20
Squid-Cache » Squid » Version: 4.0.21

cpe:2.3:a:squid-cache:squid:4.0.21
Squid-Cache » Squid » Version: 4.0.22

cpe:2.3:a:squid-cache:squid:4.0.22
Squid-Cache » Squid » Version: 4.0.23

cpe:2.3:a:squid-cache:squid:4.0.23
Squid-Cache » Squid » Version: 4.0.24

cpe:2.3:a:squid-cache:squid:4.0.24
Squid-Cache » Squid » Version: 4.0.25

cpe:2.3:a:squid-cache:squid:4.0.25
Squid-Cache » Squid » Version: 4.0.3

cpe:2.3:a:squid-cache:squid:4.0.3
Squid-Cache » Squid » Version: 4.0.4

cpe:2.3:a:squid-cache:squid:4.0.4
Squid-Cache » Squid » Version: 4.0.5

cpe:2.3:a:squid-cache:squid:4.0.5
Squid-Cache » Squid » Version: 4.0.6

cpe:2.3:a:squid-cache:squid:4.0.6
Squid-Cache » Squid » Version: 4.0.8

cpe:2.3:a:squid-cache:squid:4.0.8
Squid-Cache » Squid » Version: 4.0.9

cpe:2.3:a:squid-cache:squid:4.0.9
Squid-Cache » Squid » Version: 4.3

cpe:2.3:a:squid-cache:squid:4.3
Squid-Cache » Squid » Version: 4.4

cpe:2.3:a:squid-cache:squid:4.4
Squid-Cache » Squid » Version: 4.6

cpe:2.3:a:squid-cache:squid:4.6
Squid-Cache » Squid » Version: 4.7

cpe:2.3:a:squid-cache:squid:4.7
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12525

Products

Pricing

Contact Us