Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid-cache squid 3.4.6 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-9749
Squid 3.4.4 up to and including 3.4.11 and 3.5.0.1 up to and including 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."
Squid-cache Squid 3.4.10Squid-cache Squid 3.4.12Squid-cache Squid 3.4.5Squid-cache Squid 3.4.6Squid-cache Squid 3.4.7Squid-cache Squid 3.4.8Squid-cache Squid 3.5.0.1Squid-cache Squid 3.5.0.2Squid-cache Squid 3.5.0.3Squid-cache Squid 3.5.0.4Squid-cache Squid 3.4.4Squid-cache Squid 3.4.9Squid-cache Squid 3.4.11Squid-cache Squid 3.4.13Squid-cache Squid 3.5.1Opensuse Opensuse 13.1Opensuse Opensuse 13.2
NA
CVE-2014-7141
The pinger in Squid 3.x prior to 3.4.8 allows remote malicious users to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
Squid-cache Squid 3.4.1Squid-cache Squid 3.4.0.3Squid-cache Squid 3.1.14Squid-cache Squid 3.1.15Squid-cache Squid 3.1.21Squid-cache Squid 3.1.22Squid-cache Squid 3.1.8Squid-cache Squid 3.1.9Squid-cache Squid 3.2.0.1Squid-cache Squid 3.2.0.16Squid-cache Squid 3.2.0.17Squid-cache Squid 3.2.0.6Squid-cache Squid 3.2.0.7Squid-cache Squid 3.2.3Squid-cache Squid 3.2.4Squid-cache Squid 3.3.0.1Squid-cache Squid 3.3.0.2Squid-cache Squid 3.3.3Squid-cache Squid 3.3.4Squid-cache Squid 3.4.7Squid-cache Squid 3.4.6Squid-cache Squid 3.4.0.2
NA
CVE-2014-7142
The pinger in Squid 3.x prior to 3.4.8 allows remote malicious users to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
Oracle Solaris 11.2Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Squid-cache Squid 3.4.5Squid-cache Squid 3.4.4Squid-cache Squid 3.1.1Squid-cache Squid 3.1.10Squid-cache Squid 3.1.17Squid-cache Squid 3.1.18Squid-cache Squid 3.1.19Squid-cache Squid 3.1.5Squid-cache Squid 3.1.5.1Squid-cache Squid 3.2.0.11Squid-cache Squid 3.2.0.12Squid-cache Squid 3.2.0.2Squid-cache Squid 3.2.0.3Squid-cache Squid 3.2.1Squid-cache Squid 3.2.10Squid-cache Squid 3.2.6Squid-cache Squid 3.2.7Squid-cache Squid 3.3.10Squid-cache Squid 3.3.11
7.5
CVSSv3
CVE-2016-10002
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 up to and including 3.1.23, 3.2.0.3 up to and including 3.5.22, and 4.0.1 up to and including 4.0.16 leads to client-specific Cookie data being leaked to other clients. Atta...
Debian Debian Linux 8.0Squid-cache Squid 3.1.12Squid-cache Squid 3.1.14Squid-cache Squid 3.1.21Squid-cache Squid 3.1.22Squid-cache Squid 3.1.15Squid-cache Squid 3.1.16Squid-cache Squid 3.1.10Squid-cache Squid 3.1.11Squid-cache Squid 3.1.19Squid-cache Squid 3.1.20Squid-cache Squid 3.1.23Squid-cache Squid 3.1.17Squid-cache Squid 3.1.18Squid-cache Squid 3.2.0.14Squid-cache Squid 3.2.0.15Squid-cache Squid 3.2.0.6Squid-cache Squid 3.2.0.7Squid-cache Squid 3.2.13Squid-cache Squid 3.2.2Squid-cache Squid 3.2.9Squid-cache Squid 3.2.14
NA
CVE-2014-6270
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based ...
Squid-cache Squid 2.7.stable2Squid-cache Squid 2.7.stable3Squid-cache Squid 2.7.stable1Squid-cache Squid 2.7.stable8Squid-cache Squid 2.7.stable9Squid-cache Squid 2.6.stable8Squid-cache Squid 2.6.stable9Squid-cache Squid 2.6.stable16Squid-cache Squid 2.6.stable17Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable10Squid-cache Squid 2.5.stable11Squid-cache Squid 2.4.stable4Squid-cache Squid 2.4.stable5Squid-cache Squid 3.0Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable19Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook