Back to CVE Browser

CVE-2008-1922

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0570%

EPSS Percentile39.64th

PublishedMay 13, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, probably a crafted Squid log file.

Affected Platforms (CPE)

📦

Sarg

Squid Analysis Report Generator

All versions

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html

🔗 http://secunia.com/advisories/30156

🔗 http://secunia.com/advisories/30202

🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2009:073

🔗 http://www.securityfocus.com/bid/29141

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42321

🔗 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html

🔗 http://secunia.com/advisories/30156

Related Vulnerabilities

CVE-2008-116710.0

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remo...

CVE-2008-72499.3

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to ex...

CVE-2019-189327.0

log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temp...

CVE-2008-11684.3

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbit...