Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.5 .stable6 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2021-31807
An issue exists in Squid prior to 4.15 and 5.x prior to 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any...
Squid-cache Squid 2.5.stable6Squid-cache Squid 2.6Squid-cache Squid 2.5.stable9Squid-cache Squid 2.7Squid-cache Squid 2.5.stable4Squid-cache Squid 2.5.stable7Squid-cache Squid 2.5.stable14Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable5Squid-cache Squid 2.5.stable12Squid-cache Squid 2.5.stable13Squid-cache Squid 2.5.stable11Squid-cache Squid 2.5.stable3Squid-cache Squid 2.5.stable8Squid-cache Squid 2.5.stable10Squid-cache SquidFedoraproject Fedora 33Fedoraproject Fedora 34Netapp Cloud Manager -
NA
CVE-2014-6270
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based ...
Squid-cache Squid 2.7.stable2Squid-cache Squid 2.7.stable3Squid-cache Squid 2.7.stable1Squid-cache Squid 2.7.stable8Squid-cache Squid 2.7.stable9Squid-cache Squid 2.6.stable8Squid-cache Squid 2.6.stable9Squid-cache Squid 2.6.stable16Squid-cache Squid 2.6.stable17Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable10Squid-cache Squid 2.5.stable11Squid-cache Squid 2.4.stable4Squid-cache Squid 2.4.stable5Squid-cache Squid 3.0Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable19Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4
NA
CVE-2012-5643
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x prior to 3.1.22, 3.2.x prior to 3.2.4, and 3.3.x prior to 3.3.0.2 allow remote malicious users to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST r...
Squid-cache Squid 2.6Squid-cache Squid 2.0Squid-cache Squid 2.7Squid-cache Squid 2.2Squid-cache Squid 2.3Squid-cache Squid 2.5Squid-cache Squid 2.1Squid-cache Squid 2.4Squid-cache Squid 3.1.0.18Squid-cache Squid 3.0.stable13Squid-cache Squid 3.1.21Squid-cache Squid 3.0Squid-cache Squid 3.0.stable9Squid-cache Squid 3.1.13Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable3Squid-cache Squid 3.1.17Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.14Squid-cache Squid 3.0.stable4Squid-cache Squid 3.1.0.12
NA
CVE-2010-0639
The htcpHandleTstRequest function in htcp.c in Squid 2.x prior to 2.6.STABLE24 and 2.7 prior to 2.7.STABLE8, and htcp.cc in 3.0 prior to 3.0.STABLE24, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the...
Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 2.1Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable7Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable9Squid-cache Squid 3.0.stable23Squid-cache Squid 2.0Squid-cache Squid 2.5Squid-cache Squid 2.2Squid-cache Squid 3.0Squid-cache Squid 3.0.stable16Squid-cache Squid 3.0.stable18
NA
CVE-2010-0308
lib/rfc1035.c in Squid 2.x, 3.0 up to and including 3.0.STABLE22, and 3.1 up to and including 3.1.0.15 allows remote malicious users to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Squid-cache Squid 3.0Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 3.1.0.6Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.11Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable6Squid-cache Squid 3.0.stable5Squid-cache Squid 2.1Squid-cache Squid 2.0Squid-cache Squid 3.1Squid-cache Squid 3.1.0.1Squid-cache Squid 3.1.0.8Squid-cache Squid 3.1.0.9Squid-cache Squid 3.1.0.10Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable12
NA
CVE-2007-6239
The "cache update reply processing" functionality in Squid 2.x prior to 2.6.STABLE17 and Squid 3.0 allows remote malicious users to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Squid Squid Web Proxy Cache 2.0 Patch2Squid Squid Web Proxy Cache 2.1 Patch2Squid Squid Web Proxy Cache 2.5.stable11Squid Squid Web Proxy Cache 2.5.stable12Squid Squid Web Proxy Cache 2.5 Stable4Squid Squid Web Proxy Cache 2.5 Stable5Squid Squid Web Proxy Cache 2.6.stable14Squid Squid Web Proxy Cache 2.6.stable15Squid Squid Web Proxy Cache 2.6.stable7Squid Squid Web Proxy Cache 3.0Squid Squid Web Proxy Cache 2.4 Stable2Squid Squid Web Proxy Cache 2.4 Stable4Squid Squid Web Proxy Cache 2.5 .stable9Squid Squid Web Proxy Cache 2.5 Stable1Squid Squid Web Proxy Cache 2.5 Stable8Squid Squid Web Proxy Cache 2.6Squid Squid Web Proxy Cache 2.6.stable1Squid Squid Web Proxy Cache 2.6.stable3Squid Squid Web Proxy Cache 2.6.stable4Squid Squid Web Proxy Cache 3.0 Pre3Squid Squid Web Proxy Cache 2.3.stable4Squid Squid Web Proxy Cache 2.3.stable5
NA
CVE-2007-0247
squid/src/ftp.c in Squid prior to 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.
Squid Squid 2.6.stable6Squid Squid 2.6.stable5Squid Squid 2.6.stable4Squid Squid 2.6.stable1Squid Squid 2.6.stable3Squid Squid 2.6.stable2
NA
CVE-2005-3258
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and previous versions allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4Squid Squid 2.4.stable1Squid Squid 2.5.stable10Squid Squid 2.5.stable11Squid Squid 2.5.stable8Squid Squid 2.5.stable9Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable2Squid Squid 2.4.stable3Squid Squid 2.5.stable2Squid Squid 2.5.stable3
NA
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.5.stable7Squid Squid 2.5.stable8Squid Squid 2.0.patch1Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.2.stable3Squid Squid 2.2.stable4Squid Squid 2.3.stable4
NA
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) via certain crafted requests.
Squid Squid 2.0 Patch2Squid Squid 2.1.patch1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.3.devel2Squid Squid 2.3.devel3Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.4.stable7Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.stable1Squid Squid 2.3.stable2Squid Squid 2.4Squid Squid 2.4.stable1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook