SB2026091430 - Multiple vulnerabilities in Squid

Description

This security bulletin contains information about 2 vulnerabilities.

1) Stack-based buffer overflow (CVE-ID: N/A)

CWE-ID: CWE-121 - Stack-based buffer overflow

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to modify data or cause a denial of service.

The vulnerability exists due to a stack-based buffer overflow in ICAP authentication when processing user= and password= credential annotations for an ICAP service. A local privileged user can pass excessively long credentials through these annotations to modify data or cause a denial of service.

Exploitation requires Squid to be configured to use an ICAP server in conjunction with a misbehaving external ACL authentication helper.

2) Stack-based buffer overflow (CVE-ID: N/A)

CWE-ID: CWE-121 - Stack-based buffer overflow

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to perform an out-of-bounds write.

The vulnerability exists due to a stack-based buffer overflow in HTTP authentication when forwarding traffic to a cache_peer configured to use client-provided Basic authentication credentials. A remote user can provide Basic authentication credentials to perform an out-of-bounds write.

Remediation

Install update from vendor's website.

References

• https://github.com/squid-cache/squid/security/advisories/GHSA-vh99-xw7j-fx5c
• https://github.com/squid-cache/squid/commit/8b3c2f2eea22886288edb47d4c30177bf8673650.patch
• https://github.com/squid-cache/squid/security/advisories/GHSA-j9pf-q9f6-v44c