CVE:CVE-2019-12529
CNNVD:CNNVD-201907-666
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid 2.x版本至2.7.STABLE9版本、3.x版本至3.5.28版本和4.x版本至4.7版本中存在缓冲区错误漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
solution:Upgrade squid-cache squid to a higher version than 2.7,3.5.28,4.7,2.7:stable1,2.7:stable2,2.7:stable3,2.7:stable4,2.7:stable5,2.7:stable6,2.7:stable7,2.7:stable8,2.7:stable9,and avoid the version [2.0,2.7),[3.0,3.5.28],[4.0,4.7],2.7:stable1,2.7:stable2,2.7:stable3,2.7:stable4,2.7:stable5,2.7:stable6,2.7:stable7,2.7:stable8,2.7:stable9; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade canonical ubuntu_linux to a higher version than 12.04,16.04,18.04,19.04,and avoid the version 12.04,16.04,18.04,19.04