CVE:CVE-2021-28116
CNNVD:CNNVD-202103-704
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid through 4.14 and 5.x through 5.0.5 存在安全漏洞，该漏洞源于WCCP协议数据的越界读取。
solution:Upgrade squid-cache squid to a higher version than 4.14,5.0.5,and avoid the version (,4.14],[5.0,5.0.5]; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0