The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has squid packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of     sensitive information from heap memory, such as information associated with other users' sessions or non-     Squid processes. (CVE-2019-12528)

  - An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted     HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.
    (CVE-2020-8449)

  - An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can     cause a buffer overflow in a Squid instance acting as a reverse proxy. (CVE-2020-8450)

  - An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A     Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP     request with a Content-Length header containing +\ - or an uncommon shell whitespace character prefix     to the length field-value. (CVE-2020-15049)

  - Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all     available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when     cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply()     livelocking in peer_digest.cc mishandles EOF. (CVE-2020-24606)

  - An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP     Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This     allows any client, including browser scripts, to bypass local security and poison the proxy cache and any     downstream caches with content from an arbitrary source. When configured for relaxed header parsing (the     default), Squid relays headers containing whitespace characters to upstream servers. When this occurs as a     prefix to a Content-Length header, the frame length specified will be ignored by Squid (allowing for a     conflicting length to be used from another Content-Length header) but relayed upstream. (CVE-2020-15810)

  - An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP     Request Splitting attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This     allows any client, including browser scripts, to bypass local security and poison the browser cache and     any downstream caches with content from an arbitrary source. Squid uses a string search instead of parsing     the Transfer-Encoding header to find chunked encoding. This allows an attacker to hide a second request     inside Transfer-Encoding: it is interpreted by Squid as chunked and split out into a second request     delivered upstream. Squid will then deliver two distinct responses to the client, corrupting any     downstream caches. (CVE-2020-15811)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Squid version update to 4.13 and security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4082 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * squid: HTTP Request Smuggling could result in cache poisoning (CVE-2020-15810)

    * squid: HTTP Request Splitting could result in cache poisoning (CVE-2020-15811)

    * squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)

    * squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)

    * squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)

    * squid: Request smuggling and poisoning attack against the HTTP cache (CVE-2020-15049)

    * squid: Improper input validation could result in a DoS (CVE-2020-24606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4551-1 advisory.

    Alex Rousskov and Amit Klein discovered that Squid incorrectly handled certain Content-Length headers. A     remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in     cache poisoning. (CVE-2020-15049)

    Amit Klein discovered that Squid incorrectly validated certain data. A remote attacker could possibly use     this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. (CVE-2020-15810)

    Rgis Leroy discovered that Squid incorrectly validated certain data. A remote attacker could possibly     use this issue to perform an HTTP request splitting attack, resulting in cache poisoning. (CVE-2020-15811)

    Lubos Uhliarik discovered that Squid incorrectly handled certain Cache Digest response messages sent by     trusted peers. A remote attacker could possibly use this issue to cause Squid to consume resources,     resulting in a denial of service. (CVE-2020-24606)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has squid packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of     sensitive information from heap memory, such as information associated with other users' sessions or non-     Squid processes. (CVE-2019-12528)

  - An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A     Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP     request with a Content-Length header containing +\ - or an uncommon shell whitespace character prefix     to the length field-value. (CVE-2020-15049)

  - An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP     Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This     allows any client, including browser scripts, to bypass local security and poison the proxy cache and any     downstream caches with content from an arbitrary source. When configured for relaxed header parsing (the     default), Squid relays headers containing whitespace characters to upstream servers. When this occurs as a     prefix to a Content-Length header, the frame length specified will be ignored by Squid (allowing for a     conflicting length to be used from another Content-Length header) but relayed upstream. (CVE-2020-15810)

  - An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP     Request Splitting attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This     allows any client, including browser scripts, to bypass local security and poison the browser cache and     any downstream caches with content from an arbitrary source. Squid uses a string search instead of parsing     the Transfer-Encoding header to find chunked encoding. This allows an attacker to hide a second request     inside Transfer-Encoding: it is interpreted by Squid as chunked and split out into a second request     delivered upstream. Squid will then deliver two distinct responses to the client, corrupting any     downstream caches. (CVE-2020-15811)

  - Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all     available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when     cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply()     livelocking in peer_digest.cc mishandles EOF. (CVE-2020-24606)

  - An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted     HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.
    (CVE-2020-8449)

  - An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can     cause a buffer overflow in a Squid instance acting as a reverse proxy. (CVE-2020-8450)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for squid fixes the following issues :

squid was updated to version 4.13 :

CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671).

CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665).

CVE-2020-15810: Enforce token characters for field-name (bsc#1175664).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Squid before 4.13 and 5.x before 5.0.4 allows a trusted     peer to perform Denial of Service by consuming all     available CPU cycles during handling of a crafted Cache     Digest response message. This only occurs when     cache_peer is used with the cache digests feature. The     problem exists because peerDigestHandleReply()     livelocking in peer_digest.cc mishandles     EOF.(CVE-2020-24606)

  - An issue was discovered in Squid before 4.13 and 5.x     before 5.0.4. Due to incorrect data validation, HTTP     Request Splitting attacks may succeed against HTTP and     HTTPS traffic. This leads to cache poisoning. This     allows any client, including browser scripts, to bypass     local security and poison the browser cache and any     downstream caches with content from an arbitrary     source. Squid uses a string search instead of parsing     the Transfer-Encoding header to find chunked encoding.
    This allows an attacker to hide a second request inside     Transfer-Encoding: it is interpreted by Squid as     chunked and split out into a second request delivered     upstream. Squid will then deliver two distinct     responses to the client, corrupting any downstream     caches.(CVE-2020-15811)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-790:01 advisory.

    * squid: HTTP Request Smuggling could result in cache poisoning (CVE-2020-15810)
    * squid: HTTP Request Splitting could result in cache poisoning (CVE-2020-15811)     Modularity name: squid     Stream name: 4

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1548 advisory.

    A flaw was found in squid. Due to incorrect data validation, a HTTP Request Smuggling attack against HTTP     and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to     data confidentiality and integrity. (CVE-2020-15810)

    A flaw was found in squid. Due to incorrect data validation, an HTTP Request Splitting attack against HTTP     and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to     data confidentiality and integrity. (CVE-2020-15811)

    Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all     available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when     cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply()     livelocking in peer_digest.cc mishandles EOF. (CVE-2020-24606)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3623 advisory.

    - Resolves: #1872345 - CVE-2020-15811 squid:4/squid: HTTP Request Splitting       could result in cache poisoning
    - Resolves: #1872330 - CVE-2020-15810 squid:4/squid: HTTP Request Smuggling       could result in cache poisoning
    - Resolves: #1828368 - CVE-2019-12519 squid: improper check for new member in       ESIExpression::Evaluate allows for stack buffer overflow
    - Resolves: #1828367 - CVE-2020-11945 squid: improper access restriction upon       Digest Authentication nonce replay could lead to remote code execution

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of Squid running on the remote host is 2.x prior to 4.13 or 5.x prior to 5.0.4.  It is,therefore, affected by multiple vulnerabilities:

  - An input-validation flaw exists related to handling     HTTP and HTTPS traffic that allows HTTP request     splitting leading to cache poisoning. (CVE-2020-15810)

  - An input-validation flaw exists related to handling     HTTP and HTTPS traffic that allows HTTP request     smuggling leading to cache poisoning. (CVE-2020-15811)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4477-1 advisory.

    Amit Klein discovered that Squid incorrectly validated certain data. A remote attacker could possibly use     this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. (CVE-2020-15810)

    Rgis Leroy discovered that Squid incorrectly validated certain data. A remote attacker could possibly     use this issue to perform an HTTP request splitting attack, resulting in cache poisoning. (CVE-2020-15811)

    Lubos Uhliarik discovered that Squid incorrectly handled certain Cache Digest response messages sent by     trusted peers. A remote attacker could possibly use this issue to cause Squid to consume resources,     resulting in a denial of service. (CVE-2020-24606)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
147395	NewStart CGSL CORE 5.04 / MAIN 5.04 : squid Multiple Vulnerabilities (NS-SA-2021-0030)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2022/5/10	high
140228	Fedora 32 : 7:squid (2020-63f3bd656e)	Nessus	Fedora Local Security Checks	2020/9/4	2021/6/3	medium
141089	RHEL 7 : squid (RHSA-2020:4082)	Nessus	Red Hat Local Security Checks	2020/9/30	2024/11/7	high
140919	Ubuntu 16.04 LTS / 18.04 LTS : Squid vulnerabilities (USN-4551-1)	Nessus	Ubuntu Local Security Checks	2020/9/28	2024/8/27	high
154581	NewStart CGSL CORE 5.05 / MAIN 5.05 : squid Multiple Vulnerabilities (NS-SA-2021-0148)	Nessus	NewStart CGSL Local Security Checks	2021/10/27	2022/5/9	high
140248	SUSE SLES15 Security Update : squid (SUSE-SU-2020:2442-1)	Nessus	SuSE Local Security Checks	2020/9/4	2021/6/3	high
142077	EulerOS 2.0 SP5 : squid (EulerOS-SA-2020-2300)	Nessus	Huawei Local Security Checks	2020/10/30	2021/1/6	medium
294615	MiracleLinux 8 : squid:4 Security update (AXSA:2020-790:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
141995	Amazon Linux 2 : squid (ALAS-2020-1548)	Nessus	Amazon Linux Local Security Checks	2020/10/28	2024/12/11	medium
149376	Oracle Linux 8 : squid:4 (ELSA-2020-3623)	Nessus	Oracle Linux Local Security Checks	2021/5/11	2024/10/22	medium
139923	Squid 2.x < 4.13 / 5.x < 5.0.4 (SQUID-2020:8 and SQUID-2020:10)	Nessus	Firewalls	2020/8/28	2021/6/3	medium
140031	Ubuntu 20.04 LTS : Squid vulnerabilities (USN-4477-1)	Nessus	Ubuntu Local Security Checks	2020/8/28	2024/8/27	medium

检测

插件搜索

high

medium

high

high

high

high

medium

medium

medium

medium

medium

medium