CVEvulnerability
CVE-2020-14059
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-06-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-662
Description
An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.
Affected configurations
• squid-cache squid (>= 5.0 < 5.0.3)
Related
Weakness · CWE (1)
- CWE-662 Improper Synchronization weakness
References
- http://www.squid-cache.org/Advisories/SQUID-2020_5.txt Vendor Advisory
- http://www.squid-cache.org/Versions/v5/changesets/squid-5-7a5af8db8e0377c06ed9ffbdcb1334389c7cd8ab.patch Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20210312-0001/ Third Party Advisory
- http://www.squid-cache.org/Advisories/SQUID-2020_5.txt Vendor Advisory
- http://www.squid-cache.org/Versions/v5/changesets/squid-5-7a5af8db8e0377c06ed9ffbdcb1334389c7cd8ab.patch Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20210312-0001/ Third Party Advisory