Debian DSA-4682-1 : squid - security update

critical Nessus Plugin ID 136430


The remote Debian host is missing a security-related update.


Multiple security issues were discovered in the Squid proxy caching server, which could result in the bypass of security filters, information disclosure, the execution of arbitrary code or denial of service.


Upgrade the squid packages.

For the stable distribution (buster), these problems have been fixed in version 4.6-1+deb10u2.

See Also

Plugin Details

Severity: Critical

ID: 136430

File Name: debian_DSA-4682.nasl

Version: 1.4

Type: local

Agent: unix

Published: 5/11/2020

Updated: 3/13/2024

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information


Risk Factor: Medium

Score: 5.9


Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2020-8450


Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2020-11945

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:squid, cpe:/o:debian:debian_linux:10.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 5/8/2020

Vulnerability Publication Date: 11/26/2019

Reference Information

CVE: CVE-2019-12519, CVE-2019-12520, CVE-2019-12521, CVE-2019-12523, CVE-2019-12524, CVE-2019-12526, CVE-2019-12528, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2020-11945, CVE-2020-8449, CVE-2020-8450

DSA: 4682