Every CVE Search/ Get API key

CVE-2022-41318

Important: squid:4 security update

8.6 HighFix available

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

3.08%Up 2.1 points since Dec 26, 2022
90%50%10%1%

What each source reports

NVD Score used 8.6

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Record
CVE-2022-41318
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness
CWE-190
Updated
2026-11-02
CVE List 8.6

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Record
CVE-2022-41318
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2022-44526 8.6

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Record
EUVD-2022-44526
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVALPINE-CVE-2022-41318 8.6

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Record
ALPINE-CVE-2022-41318
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-03
OSV 8.6

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Record
CVE-2022-41318
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2022-1974 8.9

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Exposure of Sensitive Information in Cache Manager https://github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq(CVE-2022-41317)

Buffer Over Read in SSPI and SMB Authentication https://github.com/squid-cache/squid/security/advisories/GHSA-394c-rr7q-6g78(CVE-2022-41318)

Record
OESA-2022-1974
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
Show 27 moreShow less
OSVRHSA-2022:6774 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:6774
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:6775 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:6775
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:6776 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:6776
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:6777 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2022:6777
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:6815 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2022:6815
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:6839 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2022:6839
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2022:6775 8.9

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:6775
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVRLSA-2022:6839 8.9

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:6839
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-41318 8.6

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Record
UBUNTU-CVE-2022-41318
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2022:6775 No score

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:6775
Updated
2026-11-02
OSVALSA-2022:6839 No score

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:6839
Updated
2026-11-02
OSVCLSA-2022-1665501369 No score

Fixed CVE-2022-41318 in squid

  • CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication
Record
CLSA-2022-1665501369
Updated
2026-11-02
OSVCLSA-2022-1665501511 No score

Fixed CVE-2022-41318 in squid34

  • CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication
Record
CLSA-2022-1665501511
Updated
2026-11-02
OSVCLSA-2022-1665501668 No score

Fixed CVE-2022-41318 in squid34

  • CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication
Record
CLSA-2022-1665501668
Updated
2026-11-02
OSVCLSA-2022-1665501958 No score

Fixed CVE-2022-41318 in squid

  • CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication
Record
CLSA-2022-1665501958
Updated
2026-11-02
OSVCLSA-2022-1665502073 No score

Fix CVE(s): CVE-2022-41318

  • SECURITY UPDATE: buffer-over-read in SSPI and SMB authentication
    • debian/patches/CVE-2022-41318.patch: improve debugs and checks sequence to clarify cases and ensure that all are handled correctly in lib/ntlmauth/ntlmauth.cc
    • CVE-2022-41318
Record
CLSA-2022-1665502073
Updated
2026-11-02
OSVCLSA-2022-1665680517 No score

Fixed CVE-2022-41318 in squid-1.module_el8.5.0+2079+24c223d9.tuxcare.els3

  • CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication
Record
CLSA-2022-1665680517
Updated
2026-11-02
OSVCLSA-2022-1665680640 No score

Fixed CVE-2022-41318 in squid-4.module_el8.4.0+2078+2063f9d1.2.tuxcare.els4

  • CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication
Record
CLSA-2022-1665680640
Updated
2026-11-02
OSVDEBIAN-CVE-2022-41318 No score

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

Record
DEBIAN-CVE-2022-41318
Updated
2026-11-03
OSVMGASA-2022-0351 No score

Updated squid packages fix security vulnerability

Exposure of Sensitive Information in Cache Manager. (CVE-2022-41317) Buffer Over Read in SSPI and SMB Authentication. (CVE-2022-41318)

Record
MGASA-2022-0351
Updated
2026-11-02
OSVopenSUSE-SU-2024:12364-1 No score

squid-5.7-2.1 on GA media

These are all security issues fixed in the squid-5.7-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12364-1
Updated
2026-11-02
OSVSUSE-SU-2022:3531-1 No score

Security update for squid

This update for squid fixes the following issues:

Updated squid to version 5.7:

  • CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  • CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
Record
SUSE-SU-2022:3531-1
Updated
2026-11-02
OSVSUSE-SU-2022:3532-1 No score

Security update for squid

This update for squid fixes the following issues:

  • CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  • CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
Record
SUSE-SU-2022:3532-1
Updated
2026-11-02
OSVSUSE-SU-2022:3533-1 No score

Security update for squid

This update for squid fixes the following issues:

  • CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  • CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
Record
SUSE-SU-2022:3533-1
Updated
2026-11-02
OSVSUSE-SU-2022:3596-1 No score

Security update for squid

This update for squid fixes the following issues:

  • CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  • CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
Record
SUSE-SU-2022:3596-1
Updated
2026-11-02
OSVUSN-5641-1 No score

squid, squid3 vulnerabilities

Mikhail Evdokimov discovered that Squid incorrectly handled cache manager ACLs. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-41317)

It was discovered that Squid incorrectly handled SSPI and SMB authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2022-41318)

Record
USN-5641-1
Updated
2026-11-02
OSVUSN-6857-1 No score

squid3 vulnerabilities

Joshua Rogers discovered that Squid incorrectly handled requests with the urn: scheme. A remote attacker could possibly use this issue to cause Squid to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2021-28651)

It was discovered that Squid incorrectly handled SSPI and SMB authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-41318)

Joshua Rogers discovered that Squid incorrectly handled HTTP message processing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49285)

Joshua Rogers discovered that Squid incorrectly handled Helper process management. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49286)

Joshua Rogers discovered that Squid incorrectly handled HTTP request parsing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-50269, CVE-2024-25617)

Record
USN-6857-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
squid
Alpine:v3.15
 2.5 up to 5.2-r1
5.2-r1
squid
Alpine:v3.16
 2.5 up to 5.2-r1
5.2-r1
libecap
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
libecap-devel
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap-devel
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
squid
AlmaLinux:8
 before 7:4.15-3.module_el8.6.0+3275+7a670b72.2
7:4.15-3.module_el8.6.0+3275+7a670b72.2
squid
AlmaLinux:9
 before 7:5.2-1.el9_0.2
7:5.2-1.el9_0.2
squid
TuxCare:CentOS:6
 before 7:3.1.23-30.el6.tuxcare.els7
7:3.1.23-30.el6.tuxcare.els7
squid34
TuxCare:CentOS:6
 before 7:3.4.14-16.el6.tuxcare.els2
7:3.4.14-16.el6.tuxcare.els2
Show 102 moreShow less
Affected packages
PackageAffectedFixed
squid34
TuxCare:OracleLinux:6
 before 7:3.4.14-16.el6.tuxcare.els2
7:3.4.14-16.el6.tuxcare.els2
squid
TuxCare:OracleLinux:6
 before 7:3.1.23-30.el6.tuxcare.els7
7:3.1.23-30.el6.tuxcare.els7
squid
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els2
3.5.12-1ubuntu7.17+tuxcare.els2
squid-cgi
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els2
3.5.12-1ubuntu7.17+tuxcare.els2
squid-common
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els2
3.5.12-1ubuntu7.17+tuxcare.els2
squid-purge
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els2
3.5.12-1ubuntu7.17+tuxcare.els2
squid3
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els2
3.5.12-1ubuntu7.17+tuxcare.els2
squidclient
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els2
3.5.12-1ubuntu7.17+tuxcare.els2
squid
TuxCare:CentOS:8.5
 before 7:4.15-1.module_el8.5.0+2079+24c223d9.tuxcare.els3
7:4.15-1.module_el8.5.0+2079+24c223d9.tuxcare.els3
squid
TuxCare:CentOS:8.4
 before 7:4.11-4.module_el8.4.0+2078+2063f9d1.2.tuxcare.els4
7:4.11-4.module_el8.4.0+2078+2063f9d1.2.tuxcare.els4
squid
Debian:12
 before 5.7-1
5.7-1
squid
Debian:13
 before 5.7-1
5.7-1
squid
Debian:14
 before 5.7-1
5.7-1
squid
Debian:10
From an advisory covering 2 CVEs
 before 4.6-1+deb10u8, plus listed versions
4.6-14.6-1+deb10u14.6-1+deb10u24.6-1+deb10u34.6-1+deb10u44.6-1+deb10u54.6-1+deb10u64.6-1+deb10u7
4.6-1+deb10u8
squid
Debian:11
From an advisory covering 2 CVEs
 before 4.13-10+deb11u2, plus listed versions
4.13-104.13-10+deb11u1
4.13-10+deb11u2
squid
Mageia:8
From an advisory covering 2 CVEs
 before 4.17-1.2.mga8
4.17-1.2.mga8
squid
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 4.9-13.oe1
4.9-13.oe1
squid
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 4.9-13.oe1
4.9-13.oe1
squid
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 4.9-16.oe2203
4.9-16.oe2203
libecap
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.1::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.1::appstream
 before 7:4.4-8.module+el8.1.0+16758+65e5269e.5
7:4.4-8.module+el8.1.0+16758+65e5269e.5
squid-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 7:4.4-8.module+el8.1.0+16758+65e5269e.5
7:4.4-8.module+el8.1.0+16758+65e5269e.5
squid-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 7:4.4-8.module+el8.1.0+16758+65e5269e.5
7:4.4-8.module+el8.1.0+16758+65e5269e.5
libecap
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-3.module+el8.6.0+16749+7b6feaf0.2
7:4.15-3.module+el8.6.0+16749+7b6feaf0.2
squid-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-3.module+el8.6.0+16749+7b6feaf0.2
7:4.15-3.module+el8.6.0+16749+7b6feaf0.2
squid-debugsource
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-3.module+el8.6.0+16749+7b6feaf0.2
7:4.15-3.module+el8.6.0+16749+7b6feaf0.2
libecap
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+16750+7556a224.4
7:4.11-4.module+el8.4.0+16750+7556a224.4
squid-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+16750+7556a224.4
7:4.11-4.module+el8.4.0+16750+7556a224.4
squid-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+16750+7556a224.4
7:4.11-4.module+el8.4.0+16750+7556a224.4
libecap
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+16757+26d6b59c.5
7:4.4-8.module+el8.2.0+16757+26d6b59c.5
squid-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+16757+26d6b59c.5
7:4.4-8.module+el8.2.0+16757+26d6b59c.5
squid-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+16757+26d6b59c.5
7:4.4-8.module+el8.2.0+16757+26d6b59c.5
squid
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid-debuginfo
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid-migration-script
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid-sysvinit
Red Hat:enterprise_linux:7::server
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid-migration-script
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid-sysvinit
Red Hat:enterprise_linux:7::workstation
 before 7:3.5.20-17.el7_9.8
7:3.5.20-17.el7_9.8
squid
Red Hat:enterprise_linux:9::appstream
 before 7:5.2-1.el9_0.2
7:5.2-1.el9_0.2
squid-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 7:5.2-1.el9_0.2
7:5.2-1.el9_0.2
squid-debugsource
Red Hat:enterprise_linux:9::appstream
 before 7:5.2-1.el9_0.2
7:5.2-1.el9_0.2
libecap
Rocky Linux:8
 before 0:1.0.1-2.module+el8.4.0+404+316a0dc5
0:1.0.1-2.module+el8.4.0+404+316a0dc5
squid
Rocky Linux:8
 before 7:4.15-3.module+el8.6.0+1044+67ab5d0a.2
7:4.15-3.module+el8.6.0+1044+67ab5d0a.2
squid
Rocky Linux:9
 before 7:5.2-1.el9_0.2
7:5.2-1.el9_0.2
squid
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 2 CVEs
 before 5.7-150400.3.6.1
5.7-150400.3.6.1
squid
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 5.7-150400.3.6.1
5.7-150400.3.6.1
squid
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 4.17-4.27.1
4.17-4.27.1
squid
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 4.17-4.27.1
4.17-4.27.1
squid
SUSE:OpenStack Cloud 9
From an advisory covering 2 CVEs
 before 3.5.21-26.38.1
3.5.21-26.38.1
squid
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 2 CVEs
 before 3.5.21-26.38.1
3.5.21-26.38.1
squid
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 3.5.21-26.38.1
3.5.21-26.38.1
squid
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 3.5.21-26.38.1
3.5.21-26.38.1
squid
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 2 CVEs
 before 3.5.21-26.38.1
3.5.21-26.38.1
squid
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.5.21-26.38.1
3.5.21-26.38.1
squid
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Enterprise Storage 6
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 4.17-150000.5.35.1
4.17-150000.5.35.1
squid3
Ubuntu:Pro:16.04:LTS
 before 3.5.12-1ubuntu7.16+esm3, plus listed versions
3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1
Show 17 moreShow less
3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm13.5.12-1ubuntu7.16+esm2
3.5.12-1ubuntu7.16+esm3
squid3
Ubuntu:18.04:LTS
 before 3.5.27-1ubuntu1.14, plus listed versions
3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2
Show 11 moreShow less
3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.13
3.5.27-1ubuntu1.14
squid
Ubuntu:20.04:LTS
 before 4.10-1ubuntu1.7, plus listed versions
4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3
Show 8 moreShow less
4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.6
4.10-1ubuntu1.7
squid
Ubuntu:22.04:LTS
 before 5.2-1ubuntu4.2, plus listed versions
4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.1
5.2-1ubuntu4.2
squid3
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 3.5.27-1ubuntu1.14, plus listed versions
3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2
Show 11 moreShow less
3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.13
3.5.27-1ubuntu1.14
squid
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 4.10-1ubuntu1.7, plus listed versions
4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3
Show 8 moreShow less
4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.6
4.10-1ubuntu1.7
squid
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 5.2-1ubuntu4.2, plus listed versions
4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.1
5.2-1ubuntu4.2
squid3
Ubuntu:Pro:16.04:LTS
From an advisory covering 6 CVEs
 before 3.5.12-1ubuntu7.16+esm3, plus listed versions
3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1
Show 17 moreShow less
3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm13.5.12-1ubuntu7.16+esm2
3.5.12-1ubuntu7.16+esm3
squid3
Ubuntu:Pro:18.04:LTS
From an advisory covering 6 CVEs
 before 3.5.27-1ubuntu1.14+esm2, plus listed versions
3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2
Show 13 moreShow less
3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.143.5.27-1ubuntu1.14+esm1
3.5.27-1ubuntu1.14+esm2
squid
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 5.7-2.1
5.7-2.1

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-41318 is a high vulnerability (CVSS 8.6) in Squid-cache Squid, published September 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.08%, the 87th percentile. Fixed in squid 5.2-r1.

References

Show 52 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open