CVE-2020-15049

• GHSA-qf3v-rc95-96j5

• ALSA-2020:4743
• SUSE-SU-2020:14460-1
• SUSE-SU-2020:1946-1
• SUSE-SU-2020:2442-1
• SUSE-SU-2020:2443-1
• openSUSE-SU-2020:1346-1
• openSUSE-SU-2020:1369-1
• openSUSE-SU-2024:11403-1

• 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

{
    "unresolved_ranges": [
        {
            "source": "CPE_RANGE",
            "vendor_product": "squid-cache:squid",
            "extracted_events": [
                {
                    "introduced": "2.0"
                },
                {
                    "last_affected": "2.6"
                }
            ],
            "cpes": [
                "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "CPE_STRING",
            "vendor_product": "fedoraproject:fedora",
            "extracted_events": [
                {
                    "introduced": "31"
                },
                {
                    "last_affected": "31"
                }
            ],
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "CPE_STRING",
            "vendor_product": "squid-cache:squid",
            "extracted_events": [
                {
                    "introduced": "2.7"
                },
                {
                    "last_affected": "2.7"
                },
                {
                    "introduced": "2.7-stable2"
                },
                {
                    "last_affected": "2.7-stable2"
                },
                {
                    "introduced": "2.7-stable3"
                },
                {
                    "last_affected": "2.7-stable3"
                },
                {
                    "introduced": "2.7-stable4"
                },
                {
                    "last_affected": "2.7-stable4"
                },
                {
                    "introduced": "2.7-stable5"
                },
                {
                    "last_affected": "2.7-stable5"
                },
                {
                    "introduced": "2.7-stable6"
                },
                {
                    "last_affected": "2.7-stable6"
                },
                {
                    "introduced": "2.7-stable7"
                },
                {
                    "last_affected": "2.7-stable7"
                },
                {
                    "introduced": "2.7-stable8"
                },
                {
                    "last_affected": "2.7-stable8"
                },
                {
                    "introduced": "2.7-stable9"
                },
                {
                    "last_affected": "2.7-stable9"
                }
            ],
            "cpes": [
                "cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable2:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable3:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable4:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable5:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable6:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable7:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable8:*:*:*:*:*:*",
                "cpe:2.3:a:squid-cache:squid:2.7:stable9:*:*:*:*:*:*"
            ]
        }
    ]
}

• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html
• https://lists.debian.org/debian-lts-announce/2020/10/msg00005.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RG5FGSTCAYVIJPJHIY3MRZ7NFT6HDO7/
• https://usn.ubuntu.com/4551-1/
• https://github.com/squid-cache/squid/security/advisories/GHSA-qf3v-rc95-96j5
• https://security.netapp.com/advisory/ntap-20210312-0001/
• https://www.debian.org/security/2020/dsa-4732
• http://www.squid-cache.org/Versions/v4/changesets/squid-4-ea12a34d338b962707d5078d6d1fc7c6eb119a22.patch
• http://www.squid-cache.org/Versions/v5/changesets/squid-5-485c9a7bb1bba88754e07ad0094647ea57a6eb8d.patch