Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2019-18679 - Vulnerability Database
Squid

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2019-18679

High
Reference: CVE-2019-18679
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-18679
Title: Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

An issue was discovered in Squid 2.x 3.x and 4.x through 4.8. Due to incorrect data management it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code execution attacks.