Remote Yes

Type Arbitrary code execution

Description

A heap-based buffer overflow has been found in Squid before 4.9, when processing URN.

AVG-1062 squid 4.8-2 4.9-1 Critical Fixed

07 Nov 2019 ASA-201911-8 AVG-1062 squid Critical multiple issues

http://www.squid-cache.org/Advisories/SQUID-2019_7.txt
http://www.squid-cache.org/Versions/v4/changesets/squid-4-7aa0184a720fd216191474e079f4fe87de7c4f5a.patch