cache poisoning vulnerabilities and exploits

(subscribe to this query)

8.6

CVSSv3

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request....

Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 15.10 Squid-cache Squid Squid-cache Squid 4.0.6 Squid-cache Squid 4.0.5 Squid-cache Squid 4.0.4 Squid-cache Squid 4.0.3 Squid-cache Squid 4.0.9 Squid-cache Squid 4.0.2 Squid-cache Squid 4.0.1 Squid-cache Squid 4.0.8 Squid-cache Squid 4.0.7 Oracle Linux 7

8.8

CVSSv3

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or...

Squid-cache Squid Squid-cache Squid 2.7 Fedoraproject Fedora 31

9.8

CVSSv3

In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code execution when running the build cache node with its default configuration. This configuration allows anonymous access to the configuration user...

Gradle Build Cache Node Gradle Enterprise

8.6

CVSSv3

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue....

Oracle Linux 7 Oracle Linux 6 Squid-cache Squid Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 15.10

6.5

CVSSv3

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This allows any client, including browser scripts, to bypass local...

Squid-cache Squid Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Opensuse Leap 15.1 Opensuse Leap 15.2

6.5

CVSSv3

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This leads to cache poisoning. This allows any client, including browser scripts, to bypass local...

Squid-cache Squid Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Opensuse Leap 15.1 Opensuse Leap 15.2

5.9

CVSSv3

Cache Poisoning issue exists in DNS Response Rate Limiting....

Isc Bind Nlnetlabs Nsd 3.2.15 Nic Knot Resolver Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.01 Github repository available

9.8

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning....

Lavalite Lavalite 9.0.0

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook