Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2019-12854

Good to know:

icon

Date: August 15, 2019

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.

Language: C++

Severity Score

Related Resources (15)

https://nvd.nist.gov/vuln/detail/CVE-2019-12854
https://access.redhat.com/security/cve/CVE-2019-12854
https://bugs.squid-cache.org/show_bug.cgi?id=4937
https://seclists.org/bugtraq/2019/Aug/42
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
http://www.squid-cache.org/Versions/v4/changesets/squid-4-2981a957716c61ff7e21eee1d7d6eb5a237e466d.patch
https://usn.ubuntu.com/4213-1/
https://security-tracker.debian.org/tracker/CVE-2019-12854
https://people.canonical.com/~ubuntu-security/cve/CVE-2019-12854
http://www.squid-cache.org/Advisories/SQUID-2019_1.txt
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPXN2CLAGN5QSQBTOV5IGVLDOQSRFNTZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPXN2CLAGN5QSQBTOV5IGVLDOQSRFNTZ/
https://www.debian.org/security/2019/dsa-4507
https://www.mend.io/vulnerability-database/CVE-2019-12854

Severity Score

Weakness Type (CWE)

Buffer Errors

CWE-119

Insufficient Information

NVD-CWE-noinfo

Top Fix

icon

Upgrade Version

Upgrade to version 4.8

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us