CVE-2009-3826
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL...
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
- Record
CVE-2009-3826- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
- Record
CVE-2009-3826- Updated
- 2026-11-02
EUVDEUVD-2009-3797 No score
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
- Record
EUVD-2009-3797- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2vw7-9m84-rphf No score
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL...
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
- Record
GHSA-2vw7-9m84-rphf- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
- Record
CVE-2009-3826- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3826 No score
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
- Record
DEBIAN-CVE-2009-3826- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10562-1 No score
squidGuard-1.4-27.7 on GA media
These are all security issues fixed in the squidGuard-1.4-27.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10562-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidguardDebian:12 |
before 1.2.0-9 | 1.2.0-9 |
squidguardDebian:13 |
before 1.2.0-9 | 1.2.0-9 |
squidguardDebian:5.0 From an advisory covering 2 CVEs |
before 1.2.0-8.4+lenny1, plus listed versions 1.2.0-8.4 |
1.2.0-8.4+lenny1 |
squidGuardopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 1.4-27.7 | 1.4-27.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3826 is a medium vulnerability (CVSS 5.0) in Squidguard, published October 28, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.83%, the 90th percentile. Fixed in squidguard 1.2.0-9.
References
squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019
exchange.xforce.ibmcloud.com/vulnerabilities/53922
vupen.com/english/advisories/2009/3013
securitytracker.com/id?1023079
secunia.com/advisories/37107
Show 11 moreShow less
osvdb.org/59164
debian.org/security/2010/dsa-2040
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
securityfocus.com/bid/36800
nvd.nist.gov/vuln/detail/CVE-2009-3826
github.com/advisories/GHSA-2vw7-9m84-rphf
security-tracker.debian.org/tracker/CVE-2009-3826
suse.com/security/cve/CVE-2009-3700