UpHeron
All vulnerabilities

Servers and applications

CVE-2019-18679

An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code…

Severity
High 7.5
Published
26 Nov 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
43% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SquidServers and applications · cpe:a:squid-cache:squid
  • From 4.0 up to 4.8
  • From 3.0 up to 3.5.28
  • Version 2.7-stable9
  • Version 2.7-stable8
All 11 release lines
  • From 2.0 up to 2.7
  • Version 2.7-stable2
  • Version 2.7-stable3
  • Version 2.7-stable4
  • Version 2.7-stable5
  • Version 2.7-stable6
  • Version 2.7-stable7
  • Version 2.7-stable8
  • Version 2.7-stable9
  • From 3.0 up to 3.5.28
  • From 4.0 up to 4.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-18679
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-18679