CVE-2019-12529

Name
CVE-2019-12529
Description
An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checking its table. The length is then used to start decoding the string. There are no checks to ensure that the length it calculates isn't greater than the input buffer. This leads to adjacent memory being decoded as well. An attacker would not be able to retrieve the decoded data unless the Squid maintainer had configured the display of usernames on error pages.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Vendor Advisory http://www.squid-cache.org/Versions/v4/changesets/
Patch https://github.com/squid-cache/squid/commits/v4
Patch http://www.squid-cache.org/Versions/v4/changesets/squid-4-dd46b5417809647f561d8a5e0e74c3aacd235258.patch
UBUNTU https://usn.ubuntu.com/4065-1/
MLIST https://lists.debian.org/debian-lts-announce/2019/07/msg00018.html
UBUNTU https://usn.ubuntu.com/4065-2/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPXN2CLAGN5QSQBTOV5IGVLDOQSRFNTZ/
DEBIAN https://www.debian.org/security/2019/dsa-4507
BUGTRAQ https://seclists.org/bugtraq/2019/Aug/42
SUSE http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
SUSE http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html
MLIST https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:squid-cache:squid:2.7.stable1:*:*:*:*:*:*:* squid == None == 2.7.stable1
cpe:2.3:a:squid-cache:squid:2.7.stable3:*:*:*:*:*:*:* squid == None == 2.7.stable3
cpe:2.3:a:squid-cache:squid:2.7.stable8:*:*:*:*:*:*:* squid == None == 2.7.stable8
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:* squid >= 3.0 <= 3.5.28
cpe:2.3:a:squid-cache:squid:2.7.stable4:*:*:*:*:*:*:* squid == None == 2.7.stable4
cpe:2.3:a:squid-cache:squid:2.7.stable5:*:*:*:*:*:*:* squid == None == 2.7.stable5
cpe:2.3:a:squid-cache:squid:2.7.stable6:*:*:*:*:*:*:* squid == None == 2.7.stable6
cpe:2.3:a:squid-cache:squid:2.7.stable7:*:*:*:*:*:*:* squid == None == 2.7.stable7
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:* squid >= 2.0 <= 2.7
cpe:2.3:a:squid-cache:squid:2.7.stable2:*:*:*:*:*:*:* squid == None == 2.7.stable2
cpe:2.3:a:squid-cache:squid:2.7.stable9:*:*:*:*:*:*:* squid == None == 2.7.stable9
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:* squid >= 4.0 <= 4.7

Vulnerable and fixed packages

Source package Branch Version Maintainer Status