MGASA-2019-0265

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2019-0265.html
Import Source
https://advisories.mageia.org/MGASA-2019-0265.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2019-0265
Related
Published
2019-09-12T19:09:52Z
Modified
2019-09-12T18:17:37Z
Summary
Updated squid packages fix security vulnerabilities
Details

Updated squid packages fix security vulnerabilities:

It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service (CVE-2019-12525).

It was discovered that Squid incorrectly handled Basic authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service (CVE-2019-12529).

It was discovered that Squid incorrectly handled the cachemgr.cgi web module. A remote attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks (CVE-2019-13345).

References
Credits

Affected packages