Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
squid squid vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2016-3947
Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid prior to 3.5.16 and 4.x prior to 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log ...
Squid-cache Squid 4.0.5
Squid-cache Squid 4.0.3
Squid-cache Squid 4.0.1
Squid-cache Squid
Squid-cache Squid 4.0.2
Squid-cache Squid 4.0.7
Squid-cache Squid 4.0.4
Squid-cache Squid 4.0.6
Canonical Ubuntu Linux 12.04
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 15.10
Canonical Ubuntu Linux 14.04
483
VMScore
CVE-2009-0801
Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote malicious users to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted ...
Squid Squid Web Proxy Cache 3.0 Stable6
Squid Squid Web Proxy Cache 2.7.stable6
Squid Squid Web Proxy Cache 3.0 Stable7
Squid Squid Web Proxy Cache 2.7.stable5
Squid Squid Web Proxy Cache 3.0 Stable5
Squid Squid Web Proxy Cache 3.0 Stable13
Squid Squid Web Proxy Cache 3.0 Stable4
Squid Squid Web Proxy Cache 3.0 Stable3
Squid Squid Web Proxy Cache 2.7
Squid Squid Web Proxy Cache 3.0 Pre2
Squid Squid Web Proxy Cache 3.0 Stable12
Squid Squid Web Proxy Cache 3.0 Stable1
Squid Squid Web Proxy Cache 3.0 Pre1
Squid Squid Web Proxy Cache 3.0 Pre3
Squid Squid Web Proxy Cache 3.0
Squid Squid Web Proxy Cache 3.0 Stable2
7 Github repositories
445
VMScore
CVE-2007-6239
The "cache update reply processing" functionality in Squid 2.x prior to 2.6.STABLE17 and Squid 3.0 allows remote malicious users to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Squid Squid Web Proxy Cache 2.4 Stable2
Squid Squid Web Proxy Cache 2.5.stable11
Squid Squid Web Proxy Cache 2.5 Stable10
Squid Squid Web Proxy Cache 2.5 Stable3
Squid Squid Web Proxy Cache 2.5 .stable9
Squid Squid Web Proxy Cache 2.6.stable12
Squid Squid Web Proxy Cache 2.3.stable4
Squid Squid Web Proxy Cache 2.1 Patch2
Squid Squid Web Proxy Cache 2.6.stable2
Squid Squid Web Proxy Cache 2.6.stable13
Squid Squid Web Proxy Cache 2.5.stable14
Squid Squid Web Proxy Cache 2.6.stable3
Squid Squid Web Proxy Cache 2.6.stable14
Squid Squid Web Proxy Cache 2.0 Patch2
Squid Squid Web Proxy Cache 2.6.stable16
Squid Squid Web Proxy Cache 2.6.stable1
Squid Squid Web Proxy Cache 2.5 Stable4
Squid Squid Web Proxy Cache 2.5 Stable1
Squid Squid Web Proxy Cache 2.5 Stable6
Squid Squid Web Proxy Cache 2.6
Squid Squid Web Proxy Cache 3.0 Pre2
Squid Squid Web Proxy Cache 2.5 Stable7
NA
CVE-2023-50269
Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 up to and including 2.7.STABLE9, versions 3.1 up to and including 5.9, and versions 6.0.1 up to and including 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request...
Squid-cache Squid 2.6
Squid-cache Squid 2.7
Squid-cache Squid
383
VMScore
CVE-2016-2390
The FwdState::connectedToPeer method in FwdState.cc in Squid prior to 3.5.14 and 4.0.x prior to 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote malicious users to cause a denial of service (application crash) via ...
Squid-cache Squid
Squid-cache Squid 4.0.5
Squid-cache Squid 4.0.4
668
VMScore
CVE-2005-0211
Buffer overflow in wccp.c in Squid 2.5 prior to 2.5.STABLE7 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Squid-cache Squid 2.5.stable6
Squid-cache Squid 2.5.stable4
Squid-cache Squid 2.5.stable2
Squid-cache Squid 2.5.stable5
Squid-cache Squid 2.5.stable3
Squid-cache Squid 2.5.stable1
Debian Debian Linux 3.0
231
VMScore
CVE-2005-0626
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows malicious users to steal the related cookies.
Squid Squid 2.5.stable5
Squid Squid 2.5.stable6
Squid Squid 2.5.stable7
445
VMScore
CVE-2005-2917
Squid 2.5.STABLE10 and previous versions, while performing NTLM authentication, does not properly handle certain request sequences, which allows malicious users to cause a denial of service (daemon restart).
Squid Squid
Squid Squid 2.5.9
578
VMScore
CVE-2020-15049
An issue exists in http/ContentLengthInterpreter.cc in Squid prior to 4.12 and 5.x prior to 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an un...
Squid-cache Squid 2.7
Squid-cache Squid
Fedoraproject Fedora 31
445
VMScore
CVE-2004-0832
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and previous versions, with NTLM authentication enabled, allow remote malicious users to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to mem...
Squid Squid
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29824
CVE-2024-30095
CVE-2024-30104
client side
CVE-2024-5840
CVE-2024-34405
unprivileged
wireless
CVE-2024-4577
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »