CVE:CVE-2019-12854
CNNVD:CNNVD-201907-749
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。cachemgr.cgi是其中的一个缓存管理器。
Squid cachemgr.cgi 4.0至4.7版本中存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade squid-cache squid to a higher version than 4.7,and avoid the version [4.0,4.7]; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,19.10,and avoid the version 16.04,18.04,19.04,19.10; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1