漏洞信息详情
Squid 环境问题漏洞
漏洞简介
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid 4.13之前版本和5.0.4之前5.x版本中存在安全漏洞,该漏洞可引起敏感信息泄露。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://github.com/squid-cache/squid/security/advisories/GHSA-3365-q9qx-f98m
参考网址
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2020/10/msg00005.html
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html
来源:UBUNTU
链接:https://usn.ubuntu.com/4551-1/
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20210226-0006/
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20210226-0007/
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/BMTFLVB7GLRF2CKGFPZ4G4R5DIIPHWI3/
来源:MISC
链接:https://github.com/squid-cache/squid/security/advisories/GHSA-3365-q9qx-f98m
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/BE6FKUN7IGTIR2MEEMWYDT7N5EJJLZI2/
来源:DEBIAN
链接:https://www.debian.org/security/2020/dsa-4751
来源:UBUNTU
链接:https://usn.ubuntu.com/4477-1/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/HJJDI7JQFGQLVNCKMVY64LAFMKERAOK7/
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20210219-0007/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3406/
来源:www.ibm.com
链接:https://www.ibm.com/support/pages/node/6455281
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3435/
来源:www.nsfocus.net
链接:http://www.nsfocus.net/vulndb/48967
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Squid-cache-information-disclosure-via-HTTP-Request-Smuggling-33139
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0007/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158988/Ubuntu-Security-Notice-USN-4477-1.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159052/Red-Hat-Security-Advisory-2020-3623-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2964/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2020-15810
来源:access.redhat.com
链接:https://access.redhat.com/security/cve/cve-2020-15810
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159403/Red-Hat-Security-Advisory-2020-4082-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159309/Ubuntu-Security-Notice-USN-4551-1.html
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-multiple-vulnerabilities-6/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3333/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3013/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-multiple-vulnerabilities-4/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-multiple-vulnerabilities-5/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3044/
受影响实体
暂无
补丁
暂无
还没有评论,来说两句吧...