An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes.
{ "binaries": [ { "binary_name": "squid", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid-cgi", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid-cgi-dbgsym", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid-common", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid-dbg", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid-dbgsym", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid-purge", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid-purge-dbgsym", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squid3", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squidclient", "binary_version": "3.5.12-1ubuntu7.10" }, { "binary_name": "squidclient-dbgsym", "binary_version": "3.5.12-1ubuntu7.10" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "squid", "binary_version": "3.5.27-1ubuntu1.5" }, { "binary_name": "squid-cgi", "binary_version": "3.5.27-1ubuntu1.5" }, { "binary_name": "squid-common", "binary_version": "3.5.27-1ubuntu1.5" }, { "binary_name": "squid-dbg", "binary_version": "3.5.27-1ubuntu1.5" }, { "binary_name": "squid-purge", "binary_version": "3.5.27-1ubuntu1.5" }, { "binary_name": "squid3", "binary_version": "3.5.27-1ubuntu1.5" }, { "binary_name": "squidclient", "binary_version": "3.5.27-1ubuntu1.5" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "squid", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squid-cgi", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squid-cgi-dbgsym", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squid-common", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squid-dbgsym", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squid-purge", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squid-purge-dbgsym", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squid3", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squidclient", "binary_version": "4.9-2ubuntu4" }, { "binary_name": "squidclient-dbgsym", "binary_version": "4.9-2ubuntu4" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }