Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Squid Out-of-bounds Write Vulnerability - CVE-2019-12519 - Vulnerability Database
Squid

Squid Out-of-bounds Write Vulnerability - CVE-2019-12519

Critical
Reference: CVE-2019-12519
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12519
Title: Squid Out-of-bounds Write Vulnerability
Overview:

An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled Squid calls ESIExpression::Evaluate. This function uses a fixed stack buffer to hold the expression while it39s being evaluated. When processing the expression it could either evaluate the top of the stack or add a new member to the stack. When adding a new member there is no check to ensure that the stack won39t overflow.