CVE-2019-12854

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory

published August 15, 2019

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11708 · 96.1th percentile
Published
2019-08-15T16:15Z
EPSS history
Timeline
  • 15 AUG 16:15Z
    Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory
    cvelistv5