Oval Definition:oval:com.ubuntu.xenial:def:2019186760000000
Revision Date:2019-11-26Version:1
Title:CVE-2019-18676 on Ubuntu 16.04 LTS (xenial) - medium.
Description:An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote client that can reach the proxy port can trivially perform the attack via a crafted URI scheme.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-18676
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND squid3 package in xenial is affected, but a decision has been made to defer addressing it (note: '2020-03-09').
  • BACK