CVE:CVE-2019-18932
CNNVD:CNNVD-202001-925
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid Analysis Report Generator（sarg）2.3.11及之前版本中的log.c文件存在安全漏洞。本地攻击者可利用该漏洞提升权限。
solution:Upgrade squid_analysis_report_generator_project squid_analysis_report_generator to a higher version than 2.3.11,and avoid the version (,2.3.11]; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1