Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Squid Out-of-bounds Write Vulnerability - CVE-2019-12527 - Vulnerability Database
Squid

Squid Out-of-bounds Write Vulnerability - CVE-2019-12527

High
Reference: CVE-2019-12527
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12527
Title: Squid Out-of-bounds Write Vulnerability
Overview:

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn39t greater than the buffer leading to a heap-based buffer overflow with user controlled data.