Description
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code execution attacks.
Remediation
References
Related Vulnerabilities
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8707)
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.28)
MySQL CVE-2020-2853 Vulnerability (CVE-2020-2853)
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-13363)
WordPress Plugin WPFront User Role Editor Unspecified Vulnerability (2.14.1)