Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid-cache squid 2.5 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2021-31807
An issue exists in Squid prior to 4.15 and 5.x prior to 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any...
Squid-cache Squid 2.5.stable6Squid-cache Squid 2.6Squid-cache Squid 2.5.stable9Squid-cache Squid 2.7Squid-cache Squid 2.5.stable4Squid-cache Squid 2.5.stable7Squid-cache Squid 2.5.stable14Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable5Squid-cache Squid 2.5.stable12Squid-cache Squid 2.5.stable13Squid-cache Squid 2.5.stable11Squid-cache Squid 2.5.stable3Squid-cache Squid 2.5.stable8Squid-cache Squid 2.5.stable10Squid-cache SquidFedoraproject Fedora 33Fedoraproject Fedora 34Netapp Cloud Manager -
NA
CVE-2005-0211
Buffer overflow in wccp.c in Squid 2.5 prior to 2.5.STABLE7 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable6Squid-cache Squid 2.5.stable3Squid-cache Squid 2.5.stable5Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable4Debian Debian Linux 3.0
NA
CVE-2014-6270
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based ...
Squid-cache Squid 2.7.stable2Squid-cache Squid 2.7.stable3Squid-cache Squid 2.7.stable1Squid-cache Squid 2.7.stable8Squid-cache Squid 2.7.stable9Squid-cache Squid 2.6.stable8Squid-cache Squid 2.6.stable9Squid-cache Squid 2.6.stable16Squid-cache Squid 2.6.stable17Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable10Squid-cache Squid 2.5.stable11Squid-cache Squid 2.4.stable4Squid-cache Squid 2.4.stable5Squid-cache Squid 3.0Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable19Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4
NA
CVE-2010-0639
The htcpHandleTstRequest function in htcp.c in Squid 2.x prior to 2.6.STABLE24 and 2.7 prior to 2.7.STABLE8, and htcp.cc in 3.0 prior to 3.0.STABLE24, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the...
Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 2.1Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable7Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable9Squid-cache Squid 3.0.stable23Squid-cache Squid 2.0Squid-cache Squid 2.5Squid-cache Squid 2.2Squid-cache Squid 3.0Squid-cache Squid 3.0.stable16Squid-cache Squid 3.0.stable18
NA
CVE-2010-0308
lib/rfc1035.c in Squid 2.x, 3.0 up to and including 3.0.STABLE22, and 3.1 up to and including 3.1.0.15 allows remote malicious users to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Squid-cache Squid 3.0Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 3.1.0.6Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.11Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable6Squid-cache Squid 3.0.stable5Squid-cache Squid 2.1Squid-cache Squid 2.0Squid-cache Squid 3.1Squid-cache Squid 3.1.0.1Squid-cache Squid 3.1.0.8Squid-cache Squid 3.1.0.9Squid-cache Squid 3.1.0.10Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable12
NA
CVE-2012-5643
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x prior to 3.1.22, 3.2.x prior to 3.2.4, and 3.3.x prior to 3.3.0.2 allow remote malicious users to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST r...
Squid-cache Squid 2.6Squid-cache Squid 2.0Squid-cache Squid 2.7Squid-cache Squid 2.2Squid-cache Squid 2.3Squid-cache Squid 2.5Squid-cache Squid 2.1Squid-cache Squid 2.4Squid-cache Squid 3.1.0.18Squid-cache Squid 3.0.stable13Squid-cache Squid 3.1.21Squid-cache Squid 3.0Squid-cache Squid 3.0.stable9Squid-cache Squid 3.1.13Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable3Squid-cache Squid 3.1.17Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.14Squid-cache Squid 3.0.stable4Squid-cache Squid 3.1.0.12
8.6
CVSSv3
CVE-2022-41318
A buffer over-read exists in libntlmauth in Squid 2.5 up to and including 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these loc...
Squid-cache Squid
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook