CVE-2021-28116

Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data

Low · published March 9, 2021

CVSS v3.1
3.7
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.12948 · 96.3th percentile
Published
2021-03-09T21:44Z
EPSS history
Timeline
  • 09 MAR 21:44Z
    Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data
    cvelistv5