CVE-2020-11945
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-11945
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Squid 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。 Squid 5.0.2之前版本中存在安全漏洞。攻击者可通过嗅探用于身份验证的Nonce并进行重播利用该漏洞访问被限制的资源或可能执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2020-11945
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-11945
请登录查看更多情报信息。
Patches & Fixes for CVE-2020-11945 (2)
- https://github.com/squid-cache/squid/pull/585x_refsource_MISC
Vendor Advisories for CVE-2020-11945 (4)
- https://bugzilla.suse.com/show_bug.cgi?id=1170313x_refsource_CONFIRM
Mailing List Discussions for CVE-2020-11945 (6)
- http://www.openwall.com/lists/oss-security/2020/04/23/2x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00018.htmlvendor-advisoryx_refsource_SUSE
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4MWXEZAJSOGRJSS2JCJK4WBSND4IV46/vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FWQRYZJPHAZBLXJ56FPCHJN5X2FP3VA/vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RV2VZWFJNO3B56IVN56HHKJASG5DYUIX/vendor-advisoryx_refsource_FEDORA
Other References for CVE-2020-11945 (2)
Same Patch Batch · n/a · 2020-04-23 · 79 CVEs total
| CVE-2017-18733 | 多款NETGEAR产品授权问题漏洞 | |
| CVE-2017-18734 | 多款NETGEAR产品注入漏洞 | |
| CVE-2017-18747 | 多款NETGEAR产品输入验证错误漏洞 | |
| CVE-2017-18735 | 多款NETGEAR产品注入漏洞 | |
| CVE-2017-18736 | 多款NETGEAR产品注入漏洞 | |
| CVE-2020-12105 | OpenConnect 输入验证错误漏洞 | |
| CVE-2017-18732 | NETGEAR R6300、PLW1000和PLW1010 授权问题漏洞 | |
| CVE-2020-7132 | HPE Onboard Administrator 跨站脚本漏洞 | |
| CVE-2020-12113 | BigBlueButton 跨站脚本漏洞 | |
| CVE-2020-12112 | BigBlueButton 路径遍历漏洞 | |
| CVE-2017-18737 | 多款NETGEAR产品注入漏洞 | |
| CVE-2017-18738 | 多款NETGEAR产品缓冲区错误漏洞 | |
| CVE-2017-18739 | 多款NETGEAR产品缓冲区错误漏洞 | |
| CVE-2017-18740 | 多款NETGEAR产品安全漏洞 | |
| CVE-2017-18741 | 多款NETGEAR产品安全漏洞 | |
| CVE-2017-18742 | 多款NETGEAR产品跨站请求伪造漏洞 | |
| CVE-2017-18743 | 多款NETGEAR产品授权问题漏洞 | |
| CVE-2017-18744 | 多款NETGEAR产品缓冲区错误漏洞 | |
| CVE-2017-18745 | 多款NETGEAR产品跨站脚本漏洞 | |
| CVE-2017-18746 | 多款NETGEAR产品安全漏洞 |
Showing top 20 of 79 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-11945
No comments yet