Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid web proxy cache 3.0 vulnerabilities and exploits

(subscribe to this query)
5.4
CVSSv2
CVE-2009-0801
Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote malicious users to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted ...
Squid Squid Web Proxy Cache 3.0 Pre1Squid Squid Web Proxy Cache 3.0 Pre2Squid Squid Web Proxy Cache 3.0 Pre3Squid Squid Web Proxy Cache 2.7Squid Squid Web Proxy Cache 3.0Squid Squid Web Proxy Cache 3.0 Stable6Squid Squid Web Proxy Cache 3.0 Stable13Squid Squid Web Proxy Cache 2.7.stable5Squid Squid Web Proxy Cache 3.0 Stable4Squid Squid Web Proxy Cache 3.0 Stable3Squid Squid Web Proxy Cache 3.0 Stable2Squid Squid Web Proxy Cache 3.0 Stable1Squid Squid Web Proxy Cache 3.0 Stable7Squid Squid Web Proxy Cache 3.0 Stable5Squid Squid Web Proxy Cache 3.0 Stable12Squid Squid Web Proxy Cache 2.7.stable6
5
CVSSv2
CVE-2007-6239
The "cache update reply processing" functionality in Squid 2.x prior to 2.6.STABLE17 and Squid 3.0 allows remote malicious users to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Squid Squid Web Proxy Cache 2.0 Patch2Squid Squid Web Proxy Cache 2.1 Patch2Squid Squid Web Proxy Cache 2.5.stable11Squid Squid Web Proxy Cache 2.5.stable12Squid Squid Web Proxy Cache 2.5 Stable4Squid Squid Web Proxy Cache 2.5 Stable5Squid Squid Web Proxy Cache 2.6.stable14Squid Squid Web Proxy Cache 2.6.stable15Squid Squid Web Proxy Cache 2.6.stable7Squid Squid Web Proxy Cache 3.0Squid Squid Web Proxy Cache 2.4 Stable2Squid Squid Web Proxy Cache 2.4 Stable4Squid Squid Web Proxy Cache 2.5 .stable9Squid Squid Web Proxy Cache 2.5 Stable1Squid Squid Web Proxy Cache 2.5 Stable8Squid Squid Web Proxy Cache 2.6Squid Squid Web Proxy Cache 2.6.stable1Squid Squid Web Proxy Cache 2.6.stable3Squid Squid Web Proxy Cache 2.6.stable4Squid Squid Web Proxy Cache 3.0 Pre3Squid Squid Web Proxy Cache 2.3.stable4Squid Squid Web Proxy Cache 2.3.stable5
5
CVSSv2
CVE-2010-3072
The string-comparison functions in String.cci in Squid 3.x prior to 3.1.8 and 3.2.x prior to 3.2.0.2 allow remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable18Squid-cache Squid 3.0.stable19Squid-cache Squid 3.0Squid-cache Squid 3.1Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.8Squid-cache Squid 3.1.0.16Squid-cache Squid 3.1.0.17Squid-cache Squid 3.1.5.1Squid-cache Squid 3.1.6Squid-cache Squid 3.0.stable7Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable23Squid-cache Squid 3.1.0.3Squid-cache Squid 3.1.0.4Squid-cache Squid 3.1.0.11
6.8
CVSSv2
CVE-2011-3205
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 prior to 3.0.STABLE26, 3.1 prior to 3.1.15, and 3.2 prior to 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly hav...
Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable9Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4Squid-cache Squid 3.0.stable24Squid-cache Squid 3.0.stable16Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable18Squid-cache Squid 3.0.stable1Squid-cache Squid 3.0.stable6Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable5Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable17Squid-cache Squid 3.0.stable10Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable25Squid-cache Squid 3.0.stable23Squid-cache Squid 3.0.stable22
4
CVSSv2
CVE-2010-0308
lib/rfc1035.c in Squid 2.x, 3.0 up to and including 3.0.STABLE22, and 3.1 up to and including 3.1.0.15 allows remote malicious users to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Squid-cache Squid 3.0Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 3.1.0.6Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.11Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable6Squid-cache Squid 3.0.stable5Squid-cache Squid 2.1Squid-cache Squid 2.0Squid-cache Squid 3.1Squid-cache Squid 3.1.0.1Squid-cache Squid 3.1.0.8Squid-cache Squid 3.1.0.9Squid-cache Squid 3.1.0.10Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable12
5
CVSSv2
CVE-2012-5643
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x prior to 3.1.22, 3.2.x prior to 3.2.4, and 3.3.x prior to 3.3.0.2 allow remote malicious users to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST r...
Squid-cache Squid 2.6Squid-cache Squid 2.0Squid-cache Squid 2.7Squid-cache Squid 2.2Squid-cache Squid 2.3Squid-cache Squid 2.5Squid-cache Squid 2.1Squid-cache Squid 2.4Squid-cache Squid 3.1.0.18Squid-cache Squid 3.0.stable13Squid-cache Squid 3.1.21Squid-cache Squid 3.0Squid-cache Squid 3.0.stable9Squid-cache Squid 3.1.13Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable3Squid-cache Squid 3.1.17Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.14Squid-cache Squid 3.0.stable4Squid-cache Squid 3.1.0.12
7.5
CVSSv2
CVE-2005-0211
Buffer overflow in wccp.c in Squid 2.5 prior to 2.5.STABLE7 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable6Squid-cache Squid 2.5.stable3Squid-cache Squid 2.5.stable5Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable4Debian Debian Linux 3.0
5
CVSSv2
CVE-2009-0478
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote malicious users to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.
Squid Squid 2.7.stable2Squid Squid 2.7.stable1Squid Squid 3.0.stable6Squid Squid 3.0.stable5Squid Squid 3.1.0.2Squid Squid 3.1.0.3Squid Squid 2.7.stable5Squid Squid 3.0.stable12Squid Squid 3.0.stable4Squid Squid 3.0.stable3Squid Squid 3.1.0.4Squid Squid 3.0.stable11Squid Squid 3.0.stable10Squid Squid 3.0.stable2Squid Squid 3.0.stable1Squid Squid 2.7.stable4Squid Squid 2.7.stable3Squid Squid 3.0.stable9Squid Squid 3.0.stable8Squid Squid 3.0.stable7Squid Squid 3.1Squid Squid 3.1.0.1
5
CVSSv2
CVE-2009-2855
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote malicious users to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
Squid-cache Squid 2.7
5
CVSSv2
CVE-2018-1000024
The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable v...
Squid-cache SquidDebian Debian Linux 9.0Debian Debian Linux 8.0Debian Debian Linux 7.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 17.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook