Every CVE Search/ Get API key

CVE-2021-46784

Important: squid:4 security update

6.5 MediumFix available

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

5.12%Up 4.2 points since Jul 18, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Record
CVE-2021-46784
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
CVE List No score

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Record
CVE-2021-46784
Updated
2026-11-02
EUVDEUVD-2021-33440 No score

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Record
EUVD-2021-33440
Updated
2026-11-03
OSV 6.5

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Record
CVE-2021-46784
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-46784 6.5

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Record
DEBIAN-CVE-2021-46784
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-1732 7.5

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

A vulnerability was found in squid. Due to improper buffer management Squid is vulnerable to a Denial of Service attack when processing Gopher server responses.(CVE-2021-46784)

Record
OESA-2022-1732
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 19 moreShow less
OSVRHSA-2022:5526 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:5526
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5527 7.5

Red Hat Security Advisory: squid security update

Record
RHSA-2022:5527
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5528 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:5528
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5529 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:5529
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5530 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:5530
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5542 7.5

Red Hat Security Advisory: squid security update

Record
RHSA-2022:5542
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:5526 7.5

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: DoS when processing gopher server responses (CVE-2021-46784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:5526
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-46784 6.5

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Record
UBUNTU-CVE-2021-46784
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:5526 No score

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es):

  • squid: DoS when processing gopher server responses (CVE-2021-46784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:5526
Updated
2026-11-02
OSVALSA-2022:5527 No score

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es):

  • squid: DoS when processing gopher server responses (CVE-2021-46784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:5527
Updated
2026-11-02
OSVCLSA-2022-1658855510 No score

Fixed CVE-2021-46784 in squid-4.module_el8.4.0+2072+2063f9d1.2.tuxcare.els3

  • CVE-2021-46784: Fix DoS when processing gopher server responses
Record
CLSA-2022-1658855510
Updated
2026-11-02
OSVCLSA-2022-1658856112 No score

Fixed CVE-2021-46784 in squid-1.module_el8.5.0+2073+24c223d9.tuxcare.els2

  • CVE-2021-46784: Fix DoS when processing gopher server responses
Record
CLSA-2022-1658856112
Updated
2026-11-02
OSVMGASA-2022-0249 No score

Updated squid packages fix security vulnerability

Denial of Service in Gopher Processing. (CVE-2021-46784)

Record
MGASA-2022-0249
Updated
2026-11-02
OSVopenSUSE-SU-2024:12157-1 No score

squid-5.6-1.1 on GA media

These are all security issues fixed in the squid-5.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12157-1
Updated
2026-11-02
OSVSUSE-SU-2022:2359-1 No score

Security update for squid

This update for squid fixes the following issues:

  • CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)

  • Update to 5.6:

    • Improve handling of Gopher responses

  • Changes in 5.5:

    • fixes regression Bug 5192: esi_parser default is incorrect
    • Bug 5177: clientca certificates sent to https_port clients
    • Bug 5090: Must(!request->pinnedConnection()) violation
    • Kid restart leads to persistent queue overflows, delays/timeouts
Record
SUSE-SU-2022:2359-1
Updated
2026-11-02
OSVSUSE-SU-2022:2367-1 No score

Security update for squid

This update for squid fixes the following issues:

  • CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
  • CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
Record
SUSE-SU-2022:2367-1
Updated
2026-11-02
OSVSUSE-SU-2022:2392-1 No score

Security update for squid

This update for squid fixes the following issues:

  • CVE-2020-25097: Fixed HTTP Request Smuggling (bsc#1183436)
  • CVE-2021-28651: Fixed DoS in URN processing (bsc#1185921)
  • CVE-2021-46784: Fixed DoS when processing gopher server responses (bsc#1200907)
Record
SUSE-SU-2022:2392-1
Updated
2026-11-02
OSVSUSE-SU-2022:2553-1 No score

Security update for squid

This update for squid fixes the following issues:

  • CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
  • CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
Record
SUSE-SU-2022:2553-1
Updated
2026-11-02
OSVUSN-5491-1 No score

squid, squid3 vulnerability

Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service.

Record
USN-5491-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libecap
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap-devel
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
squid
AlmaLinux:8
 before 7:4.15-3.module_el8.6.0+3010+383bc947.1
7:4.15-3.module_el8.6.0+3010+383bc947.1
squid
AlmaLinux:9
 before 7:5.2-1.el9_0.1
7:5.2-1.el9_0.1
squid
TuxCare:CentOS:8.4
 before 7:4.11-4.module_el8.4.0+2072+2063f9d1.2.tuxcare.els3
7:4.11-4.module_el8.4.0+2072+2063f9d1.2.tuxcare.els3
squid
TuxCare:CentOS:8.5
 before 7:4.15-1.module_el8.5.0+2073+24c223d9.tuxcare.els2
7:4.15-1.module_el8.5.0+2073+24c223d9.tuxcare.els2
squid
Debian:12
 before 5.6-1
5.6-1
squid
Debian:13
 before 5.6-1
5.6-1
squid
Debian:14
 before 5.6-1
5.6-1
squid
Debian:10
From an advisory covering 2 CVEs
 before 4.6-1+deb10u7, plus listed versions
4.6-14.6-1+deb10u14.6-1+deb10u24.6-1+deb10u34.6-1+deb10u44.6-1+deb10u54.6-1+deb10u6
4.6-1+deb10u7
Show 82 moreShow less
Affected packages
PackageAffectedFixed
squid
Debian:11
From an advisory covering 2 CVEs
 before 4.13-10+deb11u1, plus listed versions
4.13-10
4.13-10+deb11u1
squid
Mageia:8
 before 4.17-1.1.mga8
4.17-1.1.mga8
squid
openEuler:20.03-LTS-SP1
 before 4.9-11.oe1
4.9-11.oe1
squid
openEuler:20.03-LTS-SP3
 before 4.9-11.oe1
4.9-11.oe1
squid
openEuler:22.03-LTS
 before 4.9-14.oe2203
4.9-14.oe2203
libecap
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-3.module+el8.6.0+15801+8fa20c64.1
7:4.15-3.module+el8.6.0+15801+8fa20c64.1
squid-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-3.module+el8.6.0+15801+8fa20c64.1
7:4.15-3.module+el8.6.0+15801+8fa20c64.1
squid-debugsource
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-3.module+el8.6.0+15801+8fa20c64.1
7:4.15-3.module+el8.6.0+15801+8fa20c64.1
squid
Red Hat:enterprise_linux:9::appstream
 before 7:5.2-1.el9_0.1
7:5.2-1.el9_0.1
squid-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 7:5.2-1.el9_0.1
7:5.2-1.el9_0.1
squid-debugsource
Red Hat:enterprise_linux:9::appstream
 before 7:5.2-1.el9_0.1
7:5.2-1.el9_0.1
libecap
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+15802+77c2cdda.3
7:4.11-4.module+el8.4.0+15802+77c2cdda.3
squid-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+15802+77c2cdda.3
7:4.11-4.module+el8.4.0+15802+77c2cdda.3
squid-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+15802+77c2cdda.3
7:4.11-4.module+el8.4.0+15802+77c2cdda.3
libecap
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+15803+1b4cda03.4
7:4.4-8.module+el8.2.0+15803+1b4cda03.4
squid-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+15803+1b4cda03.4
7:4.4-8.module+el8.2.0+15803+1b4cda03.4
squid-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+15803+1b4cda03.4
7:4.4-8.module+el8.2.0+15803+1b4cda03.4
libecap
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.1::appstream
 before 7:4.4-8.module+el8.1.0+15805+9a5539dc.4
7:4.4-8.module+el8.1.0+15805+9a5539dc.4
squid-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 7:4.4-8.module+el8.1.0+15805+9a5539dc.4
7:4.4-8.module+el8.1.0+15805+9a5539dc.4
squid-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 7:4.4-8.module+el8.1.0+15805+9a5539dc.4
7:4.4-8.module+el8.1.0+15805+9a5539dc.4
squid
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
squid-debuginfo
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
squid-migration-script
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
squid-sysvinit
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
squid
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
squid-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
squid-migration-script
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
squid-sysvinit
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.7
7:3.5.20-17.el7_9.7
libecap
Rocky Linux:8
 before 0:1.0.1-2.module+el8.4.0+404+316a0dc5
0:1.0.1-2.module+el8.4.0+404+316a0dc5
squid
Rocky Linux:8
 before 7:4.15-3.module+el8.6.0+1044+67ab5d0a.2
7:4.15-3.module+el8.6.0+1044+67ab5d0a.2
squid
SUSE:Linux Enterprise Module for Server Applications 15 SP4
 before 5.6-150400.3.3.1
5.6-150400.3.3.1
squid
openSUSE:Leap 15.4
 before 5.6-150400.3.3.1
5.6-150400.3.3.1
squid
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 4.17-4.24.1
4.17-4.24.1
squid
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 4.17-4.24.1
4.17-4.24.1
squid
SUSE:OpenStack Cloud 9
From an advisory covering 3 CVEs
 before 3.5.21-26.35.1
3.5.21-26.35.1
squid
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 3 CVEs
 before 3.5.21-26.35.1
3.5.21-26.35.1
squid
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 3 CVEs
 before 3.5.21-26.35.1
3.5.21-26.35.1
squid
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 3.5.21-26.35.1
3.5.21-26.35.1
squid
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 3 CVEs
 before 3.5.21-26.35.1
3.5.21-26.35.1
squid
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.5.21-26.35.1
3.5.21-26.35.1
squid
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Enterprise Storage 6
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 4.17-150000.5.32.1
4.17-150000.5.32.1
squid3
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1
Show 22 moreShow less
3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm13.5.12-1ubuntu7.16+esm23.5.12-1ubuntu7.16+esm33.5.12-1ubuntu7.16+esm43.5.12-1ubuntu7.16+esm53.5.12-1ubuntu7.16+esm63.5.12-1ubuntu7.16+esm7
 None known
squid3
Ubuntu:18.04:LTS
 before 3.5.27-1ubuntu1.13, plus listed versions
3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2
Show 10 moreShow less
3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.12
3.5.27-1ubuntu1.13
squid
Ubuntu:20.04:LTS
 before 4.10-1ubuntu1.6, plus listed versions
4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3
Show 7 moreShow less
4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.5
4.10-1ubuntu1.6
squid
Ubuntu:22.04:LTS
 before 5.2-1ubuntu4.1, plus listed versions
4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu4
5.2-1ubuntu4.1
squid
openSUSE:Tumbleweed
 before 5.6-1.1
5.6-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-46784 is a medium vulnerability (CVSS 6.5) in Squid-cache Squid, published December 31, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.12%, the 92nd percentile. Fixed in libecap 1.0.1-2.module_el8.6.0+2741+01592ae8.

References

Show 44 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open