Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-03-09T21:44:58
Updated: 2024-08-03T21:33:17.441Z
Reserved: 2021-03-09T00:00:00
Link: CVE-2021-28116
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-03-09T22:15:12.880
Modified: 2024-11-21T05:59:06.753
Link: CVE-2021-28116
Redhat