---
id: 7432
title: "CVE-2019-12527 | Cảnh báo khai thác mã từ xa trên Squid proxy"
cve: CVE-2019-12527
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2019-12527-canh-bao-khai-thac-ma-tu-xa-tren-squid-proxy/"
published_at: "2019-08-24T07:52:44Z"
tags: ["rce", "proxy", "heap-overflow", "cve-2019-12527", "squid", "patch-now"]
phying_url: "https://phying.com/item/7432"
lang: en
---

# CVE-2019-12527 | Cảnh báo khai thác mã từ xa trên Squid proxy

## Summary

CVE-2019-12527 is a heap buffer overflow in Squid proxy triggered by an oversized Authorization header, allowing remote code execution or denial of service; a PoC exists, so upgrading is urgent.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2019-12527
- **Published:** 2019-08-24T07:52:44Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2019-12527-canh-bao-khai-thac-ma-tu-xa-tren-squid-proxy/
- **Phying News:** https://phying.com/item/7432