CVE:CVE-2019-18678
CNNVD:CNNVD-201911-355
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid 3.x版本和4.x版本至4.8版本中存在安全漏洞。该漏洞源于HTTP请求处理不正确。攻击者可利用该漏洞实施HTTP响应拆分攻击。
solution:Upgrade squid-cache squid to a higher version than 3.5.28,4.8,and avoid the version [3.0,3.5.28],[4.0,4.8]; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,19.10,and avoid the version 16.04,18.04,19.04,19.10; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31