CVE-2020-8450
Published · Updated
25Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 72%
exploitation probability
72%top 1% of all CVEs
observed exploitation
nono source reports it
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Affected
1 product (4 components)
Red Hat Enterprise Linux 6
no_fix_planned: Will not fix
Fixed
5 products (98 components)
Red Hat Enterprise Linux AppStream (v. 8) · Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Enterprise Linux Workstation (v. 7) · Red Hat Enterprise Linux Workstation Optional (v. 7)
Not affected
1 product — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 5
An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.
Affected products
n/a · n/aReferences
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-05/msg00010.htmlhttps://lists.debian.org/debian-lts-announce/2020/07/msg00009.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSU6SPANL27AGK5PCGBJOKG4LUWA555J/https://security.gentoo.org/glsa/202003-34https://security.netapp.com/advisory/ntap-20210304-0002/https://usn.ubuntu.com/4289-1/https://www.debian.org/security/2020/dsa-4682http://www.squid-cache.org/Advisories/SQUID-2020_1.txthttp://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2020_1.patchhttp://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c5b3e2dd.patch