Articles by KENNETH

USN-4477-1: Squid vulnerabilities Amit Klein discovered that Squid incorrectly validated certain data. A remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. (CVE-2020-15810) Régis Leroy discovered that Squid incorrectly validated certain data. A remote attacker could possibly use this issue to perform an HTTP request splitting attack, resulting in cache poisoning. (CVE-2020-15811) Lubos Uhliarik discovered that Squid incorrectly handled certain Cache Digest response messages sent by trusted peers. A remote attacker could possibly use this issue to cause Squid to consume resources, resulting in a denial of service. (CVE-2020-24606) Source: USN-4477-1: Squid vulnerabilities

USN-4476-1: NSS vulnerability It was discovered that NSS incorrectly handled some inputs. An attacker could possibly use this issue to expose sensitive information. Source: USN-4476-1: NSS vulnerability

USN-4475-1: Chrony vulnerability It was discovered that Chrony incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. Source: USN-4475-1: Chrony vulnerability