squid

9 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-47729 Public exploit

  Squid: Memory disclosure in FTP gateway

  Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB d…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Jul 16, 2026
• Medium 5.5
  CVE-2026-50012

  Squid: Memory corruption in cache_digest reply handling

  Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Jul 16, 2026
• Medium 6.9
  CVE-2026-33515

  Squid has issues in ICP message handling

  Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing …

  squid-cache squid squid squid3 Debian Ubuntu
  Mar 26, 2026
• Medium 4.0
  CVE-2025-59362

  Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

  squid squid3 squid squid Debian Ubuntu Alpine
  Sep 26, 2025
• Medium 6.3
  CVE-2024-37894

  Squid vulnerable to heap corruption in ESI assign

  Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

  squid-cache squid squid squid3 Debian Ubuntu
  Jun 25, 2024
• Medium 5.3
  CVE-2024-25617 EPSS 88%

  Denial of Service in HTTP Header parser in squid proxy

  Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or…

  squid-cache squid squid squid3 Debian Ubuntu
  Feb 14, 2024
• Medium 6.5
  CVE-2024-23638 EPSS 60%

  SQUID-2023:11 Denial of Service in Cache Manager

  Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when…

  squid-cache squid squid squid3 Debian Ubuntu
  Jan 23, 2024
• Medium 6.5
  CVE-2022-41317

  An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs,…

  squid squid squid Debian Ubuntu Alpine
  Dec 25, 2022
• Medium 6.5
  CVE-2021-33620 EPSS 80%

  Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to al…

  squid squid3 squid squid Debian Ubuntu Alpine
  May 28, 2021