Squid CVE-2019-12527 Heap Buffer Overflow Vulnerability

Bugtraq ID:	109143
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-12527
Remote:	Yes
Local:	No
Published:	Jul 11 2019 12:00AM
Updated:	Jul 11 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Squid Squid 4.0.23 Squid Squid 4.7
Not Vulnerable:

Squid CVE-2019-12527 Heap Buffer Overflow Vulnerability

Squid is prone to a heap-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Successfully exploiting this issue allow attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.

Squid version 4.0.23 through 4.7 are vulnerable.

Squid CVE-2019-12527 Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Squid CVE-2019-12527 Heap Buffer Overflow Vulnerability

References:

• Squid 4 changes (squid-cache.org)
  
• Squid Homepage (Squid)
  
• squid-cache/squid (squid-cache)