squid-debuginfo vulnerabilities

Known vulnerabilities in the squid-debuginfo package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Out-of-bounds Write	<7:3.5.20-17.amzn2.7.21
H HTTP Request Smuggling	<7:3.5.20-17.amzn2.7.20
H Heap-based Buffer Overflow	<7:3.5.20-17.amzn2.7.20
H Buffer Over-read	<7:3.5.20-17.amzn2.7.19
M Collapse of Data into Unsafe Value	<7:3.5.20-17.amzn2.7.11
H Uncontrolled Recursion	<7:3.5.20-17.amzn2.7.16
M Expired Pointer Dereference	<7:3.5.20-17.amzn2.7.17
M Incorrect Check of Function Return Value	<7:3.5.20-17.amzn2.7.15
H Buffer Over-read	<7:3.5.20-17.amzn2.7.11
H NULL Pointer Dereference	<7:3.5.20-17.amzn2.7.14
H Out-of-bounds Read	<7:3.5.20-17.amzn2.7.14
C Buffer Overflow	<7:3.5.20-17.amzn2.7.10
C Out-of-bounds Read	<7:3.5.20-17.amzn2.7.10
C Improper Input Validation	<7:3.5.20-17.amzn2.7.10
C Improper Input Validation	<7:3.5.20-17.amzn2.7.10
C Improper Input Validation	<7:3.5.20-17.amzn2.7.10
C Cross-site Scripting (XSS)	<7:3.5.20-17.amzn2.7.10
C Out-of-Bounds	<7:3.5.20-17.amzn2.7.10
M Resource Exhaustion	<7:3.5.20-17.amzn2.7.8
M Cross-site Scripting (XSS)	<7:3.5.20-17.amzn2.7.8
H Out-of-Bounds	<7:3.5.20-17.amzn2.7.7
H Information Exposure	<7:3.5.20-17.amzn2.7.6
H Improper Input Validation	<7:3.5.20-17.amzn2.7.5
H Out-of-Bounds	<7:3.5.20-17.amzn2.7.4
H Improper Input Validation	<7:3.5.20-17.amzn2.7.5
H Use of Potentially Dangerous Function	<7:3.5.20-17.amzn2.7.3
M Improper Access Control	<7:3.5.20-17.amzn2.7.2
M Resource Exhaustion	<7:3.5.20-17.amzn2.7.2
M Improper Input Validation	<7:3.5.20-17.amzn2.7.2
M Improper Input Validation	<7:3.5.20-17.amzn2.7.2
M Memory Leak	<7:3.5.20-17.amzn2.7.2
M Integer Overflow or Wraparound	<7:3.5.20-17.amzn2.7.2
M Memory Leak	<7:3.5.20-17.amzn2.7.2
H Buffer Over-read	<7:3.5.20-17.amzn2.7.1
H Reachable Assertion	<7:3.5.20-17.amzn2.7.1
H Improper Input Validation	<7:3.5.20-17.amzn2.6.1
H Improper Locking	<7:3.5.20-17.amzn2.4.1
H HTTP Request Smuggling	<7:3.5.20-17.amzn2.4.1
H HTTP Request Smuggling	<7:3.5.20-17.amzn2.4.1
M Out-of-bounds Write	<7:3.5.20-15.amzn2.1.1
M CVE-2019-12528	<7:3.5.20-15.amzn2.1.1
M Information Exposure	<7:3.5.20-15.amzn2.1.1
M NULL Pointer Dereference	<7:3.5.20-15.amzn2.1.1
H Out-of-bounds Write	<7:3.5.20-15.amzn2.1
H Cross-site Scripting (XSS)	<7:3.5.20-15.amzn2.1
H Integer Overflow or Wraparound	<7:3.5.20-15.amzn2.1
H Out-of-bounds Write	<7:3.5.20-15.amzn2.1

Vulnerability

Vulnerable Version

Out-of-bounds Write

<7:3.5.20-17.amzn2.7.21

HTTP Request Smuggling

<7:3.5.20-17.amzn2.7.20

Heap-based Buffer Overflow

<7:3.5.20-17.amzn2.7.20

Buffer Over-read

<7:3.5.20-17.amzn2.7.19

Collapse of Data into Unsafe Value

<7:3.5.20-17.amzn2.7.11