Description
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.
Remediation
References
Related Vulnerabilities
MySQL CVE-2024-21238 Vulnerability (CVE-2024-21238)
MySQL Integer Overflow or Wraparound Vulnerability (CVE-2017-3599)
WordPress Plugin Login as User or Customer Security Bypass (1.7)
Moodle Improper Validation of Integrity Check Value Vulnerability (CVE-2021-20184)
WordPress Plugin Backup and Restore WordPress-WPBackItUp Multiple Vulnerabilities (1.9)