Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.5 stable9 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-1345
Squid 2.5.STABLE9 and previous versions does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5.stable8Squid Squid 2.5.stable9
6.5
CVSSv3
CVE-2021-31807
An issue exists in Squid prior to 4.15 and 5.x prior to 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any...
Squid-cache Squid 2.5.stable6Squid-cache Squid 2.6Squid-cache Squid 2.5.stable9Squid-cache Squid 2.7Squid-cache Squid 2.5.stable4Squid-cache Squid 2.5.stable7Squid-cache Squid 2.5.stable14Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable5Squid-cache Squid 2.5.stable12Squid-cache Squid 2.5.stable13Squid-cache Squid 2.5.stable11Squid-cache Squid 2.5.stable3Squid-cache Squid 2.5.stable8Squid-cache Squid 2.5.stable10Squid-cache SquidFedoraproject Fedora 33Fedoraproject Fedora 34Netapp Cloud Manager -
NA
CVE-2005-3258
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and previous versions allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4Squid Squid 2.4.stable1Squid Squid 2.5.stable10Squid Squid 2.5.stable11Squid Squid 2.5.stable8Squid Squid 2.5.stable9Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable2Squid Squid 2.4.stable3Squid Squid 2.5.stable2Squid Squid 2.5.stable3
NA
CVE-2005-0626
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows malicious users to steal the related cookies.
Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5.stable5
NA
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.5.stable7Squid Squid 2.5.stable8Squid Squid 2.0.patch1Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.2.stable3Squid Squid 2.2.stable4Squid Squid 2.3.stable4
NA
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) via certain crafted requests.
Squid Squid 2.0 Patch2Squid Squid 2.1.patch1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.3.devel2Squid Squid 2.3.devel3Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.4.stable7Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.stable1Squid Squid 2.3.stable2Squid Squid 2.4Squid Squid 2.4.stable1
NA
CVE-2014-6270
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based ...
Squid-cache Squid 2.7.stable2Squid-cache Squid 2.7.stable3Squid-cache Squid 2.7.stable1Squid-cache Squid 2.7.stable8Squid-cache Squid 2.7.stable9Squid-cache Squid 2.6.stable8Squid-cache Squid 2.6.stable9Squid-cache Squid 2.6.stable16Squid-cache Squid 2.6.stable17Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable10Squid-cache Squid 2.5.stable11Squid-cache Squid 2.4.stable4Squid-cache Squid 2.4.stable5Squid-cache Squid 3.0Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable19Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4
NA
CVE-2007-6239
The "cache update reply processing" functionality in Squid 2.x prior to 2.6.STABLE17 and Squid 3.0 allows remote malicious users to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Squid Squid Web Proxy Cache 2.0 Patch2Squid Squid Web Proxy Cache 2.1 Patch2Squid Squid Web Proxy Cache 2.5.stable11Squid Squid Web Proxy Cache 2.5.stable12Squid Squid Web Proxy Cache 2.5 Stable4Squid Squid Web Proxy Cache 2.5 Stable5Squid Squid Web Proxy Cache 2.6.stable14Squid Squid Web Proxy Cache 2.6.stable15Squid Squid Web Proxy Cache 2.6.stable7Squid Squid Web Proxy Cache 3.0Squid Squid Web Proxy Cache 2.4 Stable2Squid Squid Web Proxy Cache 2.4 Stable4Squid Squid Web Proxy Cache 2.5 .stable9Squid Squid Web Proxy Cache 2.5 Stable1Squid Squid Web Proxy Cache 2.5 Stable8Squid Squid Web Proxy Cache 2.6Squid Squid Web Proxy Cache 2.6.stable1Squid Squid Web Proxy Cache 2.6.stable3Squid Squid Web Proxy Cache 2.6.stable4Squid Squid Web Proxy Cache 3.0 Pre3Squid Squid Web Proxy Cache 2.3.stable4Squid Squid Web Proxy Cache 2.3.stable5
NA
CVE-2010-0639
The htcpHandleTstRequest function in htcp.c in Squid 2.x prior to 2.6.STABLE24 and 2.7 prior to 2.7.STABLE8, and htcp.cc in 3.0 prior to 3.0.STABLE24, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the...
Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 2.1Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable7Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable9Squid-cache Squid 3.0.stable23Squid-cache Squid 2.0Squid-cache Squid 2.5Squid-cache Squid 2.2Squid-cache Squid 3.0Squid-cache Squid 3.0.stable16Squid-cache Squid 3.0.stable18
NA
CVE-2010-0308
lib/rfc1035.c in Squid 2.x, 3.0 up to and including 3.0.STABLE22, and 3.1 up to and including 3.1.0.15 allows remote malicious users to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Squid-cache Squid 3.0Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 3.1.0.6Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.11Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable6Squid-cache Squid 3.0.stable5Squid-cache Squid 2.1Squid-cache Squid 2.0Squid-cache Squid 3.1Squid-cache Squid 3.1.0.1Squid-cache Squid 3.1.0.8Squid-cache Squid 3.1.0.9Squid-cache Squid 3.1.0.10Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable12
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644unprivilegedCVE-2024-3494CVE-2024-22460CVE-2024-26026CVE-2024-23473firewallCVE-2024-28889XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook