CVE-2019-12527: An issue was discovered in Squid 4.0.23 through 4.7.

Security readout for executives and security teams

Squid proxy versions 4.0.23 through 4.7 can mishandle Basic Authentication data, causing a heap buffer overflow with attacker-controlled input. For organizations using Squid as an internet or internal proxy, this is a meaningful memory-corruption risk even though the bundle gives no CVSS score or active exploitation evidence. Likely exposure is Squid proxy deployments running 4.0.23 through 4.7, especially systems that process Basic Authentication. The bundle does not identify specific CPEs, configurations, or package-version mappings beyond Squid 4.x vendor updates. Treat this as a priority patching item for Squid proxy infrastructure, especially exposed or authentication-enabled deployments. No active exploitation is cited, but memory corruption in a proxy can create operational and security risk. Mitigation focus: Apply the relevant Squid security update from your OS vendor or upstream Squid guidance.; Prioritize proxies reachable by untrusted clients or processing Basic Authentication.; Check Squid upstream change set 7f73e9c5 for the referenced fix context..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.