UpHeron
All vulnerabilities

Servers and applications

CVE-2019-12526

An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. When receiving data from a remote server in response to an URN request, Squid fails to ensure that the response can fit within the buffer. This leads to attacker controlled data overflowing in the heap.

Severity
Critical 9.8
Published
26 Nov 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
20% in the next 30 daysHigher than 97% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SquidServers and applications · cpe:a:squid-cache:squid
  • From 3.0 up to 3.5.28
  • From 4.0 up to 4.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12526
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12526