squid

9 results · Clear filters · Feed

• High 8.6
  CVE-2023-50269 EPSS 58%

  SQUID-2023:10 Denial of Service in HTTP Request parsing

  Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This …

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Dec 14, 2023
• High 8.6
  CVE-2023-49285 EPSS 88%

  Denial of Service in HTTP Message Processing in Squid

  Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgr…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Dec 4, 2023
• High 8.6
  CVE-2023-49286 EPSS 10%

  Denial of Service in Helper Process management

  Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5.…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Dec 4, 2023
• High 8.6
  CVE-2023-49288

  Denial of Service in HTTP Collapsed Forwarding in Squid

  Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and includ…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Dec 4, 2023
• High 8.6
  CVE-2023-46847 EPSS 79%

  Squid: denial of service in http digest authentication

  Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine
  Nov 3, 2023
• High 8.6
  CVE-2023-46848 EPSS 11%

  Squid: denial of service in ftp

  Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine
  Nov 3, 2023
• High 8.6
  CVE-2023-46724

  SQUID-2023:4 Denial of Service in SSL Certificate validation

  Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Nov 1, 2023
• High 8.6
  CVE-2022-41318

  A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection…

  squid squid3 squid squid Debian Ubuntu Alpine
  Dec 25, 2022
• High 8.6
  CVE-2020-24606

  Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CP…

  squid squid3 squid squid Debian Ubuntu Alpine
  Aug 24, 2020