Vulnerability Details : CVE-2019-12520
An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by making a MD5 hash of the absolute URL of the request. If found, it servers the request. The absolute URL can include the decoded UserInfo (username and password) for certain protocols. This decoded info is prepended to the domain. This allows an attacker to provide a username that has special characters to delimit the domain, and treat the rest of the URL as a path or query string. An attacker could first make a request to their domain using an encoded username, then when a request for the target domain comes in that decodes to the exact URL, it will serve the attacker's HTML instead of the real HTML. On Squid servers that also act as reverse proxies, this allows an attacker to gain access to features that only reverse proxies can use, such as ESI.
Vulnerability category: Input validation
Products affected by CVE-2019-12520
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*
Threat overview for CVE-2019-12520
Top countries where our scanners detected CVE-2019-12520
Top open port discovered on systems with this issue
3128
IPs affected by CVE-2019-12520 1,396,754
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2019-12520!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2019-12520
4.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 88 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-12520
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST | |
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2019-12520
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-12520
-
https://www.debian.org/security/2020/dsa-4682
Debian -- Security Information -- DSA-4682-1 squidThird Party Advisory
-
https://github.com/squid-cache/squid/commits/v4
Commits · squid-cache/squid · GitHubPatch;Third Party Advisory
-
http://www.squid-cache.org/Versions/v4/changesets/
Squid 4 changesRelease Notes;Vendor Advisory
-
http://www.squid-cache.org/Versions/v4/
squid : Optimising Web DeliveryRelease Notes;Vendor Advisory
-
https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html
[SECURITY] [DLA 2278-1] squid3 security updateMailing List;Third Party Advisory
-
https://usn.ubuntu.com/4446-1/
USN-4446-1: Squid vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
https://gitlab.com/jeriko.one/security/-/blob/master/squid/CVEs/CVE-2019-12520.txt
squid/CVEs/CVE-2019-12520.txt · master · Jeriko One / Security · GitLabThird Party Advisory
-
https://security.netapp.com/advisory/ntap-20210205-0006/
January 2021 Squid Vulnerabilities in NetApp Products | NetApp Product SecurityThird Party Advisory
Jump to