by Kastro
Paper/Archive/CVE-2020-15049

CVE-2020-15049

mitre — An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3.

EPSS 6%CVSS 9.9
critical.is priorityof 100
48
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 93.0.930 × 2018.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace character prefix to the length field-value.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.9CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

References

refsquid-cache.org/Versions/v4/changesets/squid-4-ea12a34d338b962707d5078d6d1fc7c6eb119a22.patchrefsquid-cache.org/Versions/v5/changesets/squid-5-485c9a7bb1bba88754e07ad0094647ea57a6eb8d.patchrefgithub.com/squid-cache/squid/security/advisories/GHSA-qf3v-rc95-96j5advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RG5FGSTCAYVIJPJHIY3MRZ7NFT6HDO7advisorydebian.org/security/2020/dsa-4732advisorylists.opensuse.org/opensuse-security-announce/2020-09/msg00012.htmladvisorylists.opensuse.org/opensuse-security-announce/2020-09/msg00017.htmladvisoryusn.ubuntu.com/4551-1reflists.debian.org/debian-lts-announce/2020/10/msg00005.htmlrefsecurity.netapp.com/advisory/ntap-20210312-0001