44 results · Feed
-
Medium 6.5CVE-2026-47729 Public exploit
Squid: Memory disclosure in FTP gateway
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB d…
-
Medium 5.5
Squid: Memory corruption in cache_digest reply handling
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may…
-
Critical 10.0
Squid vulnerable to information disclosure via authentication credential leakage in error handling
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…
-
Medium 4.0
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
-
High 8.6CVE-2023-50269 EPSS 58%
SQUID-2023:10 Denial of Service in HTTP Request parsing
Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This …
-
High 8.6CVE-2023-49285 EPSS 88%
Denial of Service in HTTP Message Processing in Squid
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgr…
-
High 8.6CVE-2023-49286 EPSS 10%
Denial of Service in Helper Process management
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5.…
-
High 8.6
Denial of Service in HTTP Collapsed Forwarding in Squid
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and includ…
-
High 8.6CVE-2023-46847 EPSS 79%
Squid: denial of service in http digest authentication
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
-
High 8.6CVE-2023-46848 EPSS 11%
Squid: denial of service in ftp
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
-
Critical 9.3
Squid: request/response smuggling in http/1.1 and icap
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
-
High 8.6
SQUID-2023:4 Denial of Service in SSL Certificate validation
Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation…
-
Medium 6.5
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs,…
-
High 8.6
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection…
-
Unscored —
An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, …
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server t…
-
Medium 6.5CVE-2021-33620 EPSS 80%
Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to al…
-
Unscored —CVE-2021-28662 EPSS 72%
An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response head…
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial o…
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Deni…
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to …
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to …
-
Unscored —
An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trus…
-
Low 3.7CVE-2021-28116 EPSS 13%
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bo…
-
Unscored —
An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Split…
-
Unscored —
An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smugg…
-
High 8.6
Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CP…
-
Critical 9.9
An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggl…
-
Unscored —CVE-2020-11945 EPSS 27%
An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to ga…
-
Unscored —
An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpres…
-
Unscored —
An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESICo…
-
Unscored —CVE-2019-12528 EPSS 10%
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informa…
-
Unscored —
An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials pa…
-
Unscored —CVE-2020-8450 EPSS 72%
An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ov…
-
Unscored —
An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests…
-
Unscored —CVE-2019-18679 EPSS 43%
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to i…
-
Unscored —
An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is config…
-
Unscored —CVE-2019-12525 EPSS 24%
An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authe…
-
Unscored —CVE-2019-13345 EPSS 74%
The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
-
Unscored —
This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation…