squid-cache squid vulnerabilities and exploits

(subscribe to this query)

NA

Squid prior to 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote malicious users to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

Fedoraproject Fedora 22 Debian Debian Linux 8.0 Debian Debian Linux 7.0 Squid-cache Squid

6.5

CVSSv3

In Squid 3.x up to and including 3.5.28, 4.x up to and including 4.17, and 5.x prior to 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Squid-cache Squid Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

4.9

CVSSv3

An issue exists in Squid prior to 4.15 and 5.x prior to 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecif...

Squid-cache Squid Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34

5.3

CVSSv3

Squid up to and including 4.14 and 5.x up to and including 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.

Squid-cache Squid Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 10.0 Debian Debian Linux 11.0

5.9

CVSSv3

An issue exists in Squid 2.x up to and including 2.7.STABLE9, 3.x up to and including 3.5.28, and 4.x up to and including 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be d...

Squid-cache Squid 2.7 Squid-cache Squid Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 29 Opensuse Leap 15.0 Opensuse Leap 15.1 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04

7.5

CVSSv3

An issue exists in Squid prior to 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the credentials buffer. On systems with memory access protections, this can result in the helper process being ter...

Squid-cache Squid Opensuse Leap 15.1 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

7.5

CVSSv3

Squid is vulnerable to Denial of Service attack against HTTP and HTTPS clients due to an Improper Handling of Structural Elements bug.

Squid-cache Squid Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

8.6

CVSSv3

An issue exists in Squid up to and including 4.13 and 5.x up to and including 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the security controls. This occurs for certain uri_whites...

Squid-cache Squid Debian Debian Linux 10.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Manager -

7.5

CVSSv3

An issue exists in Squid up to and including 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by making a MD5 hash of the absolute URL of the request. If found, it servers the request. The absolute URL can include the ...

Squid-cache Squid Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Debian Debian Linux 9.0 Debian Debian Linux 10.0

9.8

CVSSv3

An issue exists in Squid up to and including 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maint...

Squid-cache Squid Debian Debian Linux 9.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04

Get Started

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook