CVE-2019-18678 log

Severity High
Remote Yes
Type Content spoofing
A HTTP request splitting issue has been found in Squid before 4.9. This issue allows attackers to smuggle HTTP requests through frontend software to a Squid which splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between client and Squid with attacker controlled content at arbitrary URLs.
Group Package Affected Fixed Severity Status Ticket
AVG-1062 squid 4.8-2 4.9-1 Critical Fixed
Date Advisory Group Package Severity Type
07 Nov 2019 ASA-201911-8 AVG-1062 squid Critical multiple issues