Unpatched Squid Servers Exposed to DoS, Code Execution Attacks

guest · Aug 22, 2019

Unpatched Squid Servers Exposed to DoS, Code Execution Attacks
August 22, 2019
https://www.bleepingcomputer.com/ne...ervers-exposed-to-dos-code-execution-attacks/

Multiple versions of the Squid web proxy cache server built with Basic Authentication features are currently vulnerable to code execution and denial-of-service (DoS) attacks triggered by the exploitation of a heap buffer overflow security flaw.

The vulnerability present in Squid 4.0.23 through 4.7 is caused by incorrect buffer management which renders vulnerable installations to "a heap overflow and possible remote code execution attack when processing HTTP Authentication credentials."

"When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data," says MITRE's description of the vulnerability. "Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data."
Some unpatched servers exposed to attacks
Remote unauthenticated attackers could exploit the flaw tracked as CVE-2019-12527 that comes with a high severity CVSS v3.0 base score of 8.8 by sending a specially crafted request to any targeted server to either execute arbitrary code or to cause Squid to crash, triggering a DoS state.
Click to expand...

Log in or Sign up

Unpatched Squid Servers Exposed to DoS, Code Execution Attacks

guest Guest

Log in or Sign up

Unpatched Squid Servers Exposed to DoS, Code Execution Attacks

guest Guest

Useful Searches