Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Squid Out-of-bounds Write Vulnerability - CVE-2019-12521 - Vulnerability Database
Squid

Squid Out-of-bounds Write Vulnerability - CVE-2019-12521

Medium
Reference: CVE-2019-12521
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12521
Title: Squid Out-of-bounds Write Vulnerability
Overview:

An issue was discovered in Squid through 4.7. When Squid is parsing ESI it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed it is added via addStackElement. addStackElement has a check for the number of elements in this buffer but it39s off by 1 leading to a Heap Overflow of 1 element. The overflow is within the same structure so it can39t affect adjacent memory blocks and thus just leads to a crash while processing.