CVE-2019-18679

Name	CVE-2019-18679
Description	An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code execution attacks.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2028-1, DLA-2278-1, DSA-4682-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
squid (PTS)	buster	4.6-1+deb10u7	fixed
	buster (security)	4.6-1+deb10u8	fixed
	bullseye (security), bullseye	4.13-10+deb11u2	fixed
	bookworm, trixie	5.7-2	fixed
	sid	6.1-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
squid	source	buster	4.6-1+deb10u2	DSA-4682-1
squid	source	(unstable)	4.9-1
squid3	source	jessie	3.4.8-6+deb8u9	DLA-2028-1
squid3	source	stretch	3.5.23-5+deb9u2	DLA-2278-1
squid3	source	(unstable)	(unfixed)

Notes

Squid 4: http://www.squid-cache.org/Versions/v4/changesets/squid-4-6f2841090dffbec1a2b2417e18bb3dc71d62dd2e.patch
http://www.squid-cache.org/Advisories/SQUID-2019_11.txt