CVE-2019-18678 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	High
Remote	Yes
Type	Content spoofing
Description	A HTTP request splitting issue has been found in Squid before 4.9. This issue allows attackers to smuggle HTTP requests through frontend software to a Squid which splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between client and Squid with attacker controlled content at arbitrary URLs.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1062	squid	4.8-2	4.9-1	Critical	Fixed

Date	Advisory	Group	Package	Severity	Type
07 Nov 2019	ASA-201911-8	AVG-1062	squid	Critical	multiple issues

References
http://www.squid-cache.org/Advisories/SQUID-2019_10.txt http://www.squid-cache.org/Versions/v4/changesets/squid-4-671ba97abe929156dc4c717ee52ad22fba0f7443.patch