CVE-2021-28116
Summary
| CVE | CVE-2021-28116 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-03-09 22:15:00 UTC |
|---|
| Updated | 2023-11-07 03:32:00 UTC |
|---|
| Description | Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| oss-security - CVE-2021-28116 / ZDI-CAN-11610 / SQUID-2020:12 Out-Of-Bounds memory
access in WCCPv2 |
MLIST |
www.openwall.com |
|
| [SECURITY] Fedora 33 Update: squid-4.15-1.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| Debian -- Security Information -- DSA-5171-1 squid |
DEBIAN |
www.debian.org |
|
| [SECURITY] Fedora 33 Update: squid-4.15-1.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| ZDI-21-157 | Zero Day Initiative |
MISC |
www.zerodayinitiative.com |
Third Party Advisory, VDB Entry |
| squid : Optimising Web Delivery |
MISC |
www.squid-cache.org |
Product, Vendor Advisory |
| Squid: Multiple vulnerabilities (GLSA 202105-14) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| [SECURITY] Fedora 34 Update: squid-5.0.6-1.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: squid-5.0.6-1.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| github.com/squid-cache/squid/security/advisories/GHSA-rgf3-9v3p-qp82 |
MISC |
github.com |
Broken Link |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159831 Oracle Enterprise Linux Security Update for squid:4 (ELSA-2022-1939)
- 179566 Debian Security Update for squid (DSA 5171-1)
- 183930 Debian Security Update for squid (CVE-2021-28116)
- 198532 Ubuntu Security Notification for Squid Vulnerability (USN-5104-1)
- 240284 Red Hat Update for squid:4 (RHSA-2022:1939)
- 281619 Fedora Security Update for squid (FEDORA-2021-c0bec55ec7)
- 281620 Fedora Security Update for squid (FEDORA-2021-24af72ff2c)
- 296065 Oracle Solaris 11.4 Support Repository Update (SRU) 39.107.1 Missing (CPUOCT2021)
- 356184 Amazon Linux Security Advisory for squid : ALASSQUID4-2023-004
- 356430 Amazon Linux Security Advisory for squid : ALAS2-2023-2318
- 500662 Alpine Linux Security Update for squid
- 501498 Alpine Linux Security Update for squid
- 502033 Alpine Linux Security Update for squid
- 504434 Alpine Linux Security Update for squid
- 671160 EulerOS Security Update for squid (EulerOS-SA-2021-2815)
- 671714 EulerOS Security Update for squid (EulerOS-SA-2022-1766)
- 671830 EulerOS Security Update for squid (EulerOS-SA-2022-1916)
- 710101 Gentoo Linux Squid Multiple vulnerabilities (GLSA 202105-14)
- 751209 SUSE Enterprise Linux Security Update for squid (SUSE-SU-2021:3334-1)
- 751267 OpenSUSE Security Update for squid (openSUSE-SU-2021:3485-1)
- 751309 OpenSUSE Security Update for squid (openSUSE-SU-2021:1419-1)
- 940533 AlmaLinux Security Update for squid:4 (ALSA-2022:1939)
- 960257 Rocky Linux Security Update for squid:4 (RLSA-2022:1939)
