Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid-cache squid 3.1.20 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-5643
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x prior to 3.1.22, 3.2.x prior to 3.2.4, and 3.3.x prior to 3.3.0.2 allow remote malicious users to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST r...
Squid-cache Squid 2.6Squid-cache Squid 2.0Squid-cache Squid 2.7Squid-cache Squid 2.2Squid-cache Squid 2.3Squid-cache Squid 2.5Squid-cache Squid 2.1Squid-cache Squid 2.4Squid-cache Squid 3.1.0.18Squid-cache Squid 3.0.stable13Squid-cache Squid 3.1.21Squid-cache Squid 3.0Squid-cache Squid 3.0.stable9Squid-cache Squid 3.1.13Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable3Squid-cache Squid 3.1.17Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.14Squid-cache Squid 3.0.stable4Squid-cache Squid 3.1.0.12
NA
CVE-2014-7141
The pinger in Squid 3.x prior to 3.4.8 allows remote malicious users to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
Squid-cache Squid 3.4.1Squid-cache Squid 3.4.0.3Squid-cache Squid 3.1.14Squid-cache Squid 3.1.15Squid-cache Squid 3.1.21Squid-cache Squid 3.1.22Squid-cache Squid 3.1.8Squid-cache Squid 3.1.9Squid-cache Squid 3.2.0.1Squid-cache Squid 3.2.0.16Squid-cache Squid 3.2.0.17Squid-cache Squid 3.2.0.6Squid-cache Squid 3.2.0.7Squid-cache Squid 3.2.3Squid-cache Squid 3.2.4Squid-cache Squid 3.3.0.1Squid-cache Squid 3.3.0.2Squid-cache Squid 3.3.3Squid-cache Squid 3.3.4Squid-cache Squid 3.4.7Squid-cache Squid 3.4.6Squid-cache Squid 3.4.0.2
NA
CVE-2014-7142
The pinger in Squid 3.x prior to 3.4.8 allows remote malicious users to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
Oracle Solaris 11.2Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Squid-cache Squid 3.4.5Squid-cache Squid 3.4.4Squid-cache Squid 3.1.1Squid-cache Squid 3.1.10Squid-cache Squid 3.1.17Squid-cache Squid 3.1.18Squid-cache Squid 3.1.19Squid-cache Squid 3.1.5Squid-cache Squid 3.1.5.1Squid-cache Squid 3.2.0.11Squid-cache Squid 3.2.0.12Squid-cache Squid 3.2.0.2Squid-cache Squid 3.2.0.3Squid-cache Squid 3.2.1Squid-cache Squid 3.2.10Squid-cache Squid 3.2.6Squid-cache Squid 3.2.7Squid-cache Squid 3.3.10Squid-cache Squid 3.3.11
NA
CVE-2013-0189
cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote malicious users to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorre...
Squid-cache Squid 3.1.0.18Squid-cache Squid 3.1.13Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.14Squid-cache Squid 3.1.0.12Squid-cache Squid 3.1.1Squid-cache Squid 3.1.0.3Squid-cache Squid 3.1.0.1Squid-cache Squid 3.1.22Squid-cache Squid 3.1.14Squid-cache Squid 3.1.8Squid-cache Squid 3.1.6Squid-cache Squid 3.1.0.9Squid-cache Squid 3.1.0.15Squid-cache Squid 3.1.15Squid-cache Squid 3.1.0.13Squid-cache Squid 3.1.12Squid-cache Squid 3.1.10Squid-cache Squid 3.1.3Squid-cache Squid 3.1.0.2Squid-cache Squid 3.1.5Squid-cache Squid 3.1.7
7.5
CVSSv3
CVE-2016-10002
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 up to and including 3.1.23, 3.2.0.3 up to and including 3.5.22, and 4.0.1 up to and including 4.0.16 leads to client-specific Cookie data being leaked to other clients. Atta...
Debian Debian Linux 8.0Squid-cache Squid 3.1.12Squid-cache Squid 3.1.14Squid-cache Squid 3.1.21Squid-cache Squid 3.1.22Squid-cache Squid 3.1.15Squid-cache Squid 3.1.16Squid-cache Squid 3.1.10Squid-cache Squid 3.1.11Squid-cache Squid 3.1.19Squid-cache Squid 3.1.20Squid-cache Squid 3.1.23Squid-cache Squid 3.1.17Squid-cache Squid 3.1.18Squid-cache Squid 3.2.0.14Squid-cache Squid 3.2.0.15Squid-cache Squid 3.2.0.6Squid-cache Squid 3.2.0.7Squid-cache Squid 3.2.13Squid-cache Squid 3.2.2Squid-cache Squid 3.2.9Squid-cache Squid 3.2.14
NA
CVE-2015-5400
Squid prior to 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote malicious users to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.
Fedoraproject Fedora 22Debian Debian Linux 8.0Debian Debian Linux 7.0Squid-cache Squid
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook