{"id":"CVE-2026-47729","aliases":["ALPINE-CVE-2026-47729","AZL-92444","CLSA-2026-1784710881","CLSA-2026-1784713205","CLSA-2026-1784713308","CLSA-2026-1784716497","CLSA-2026-1784725992","CLSA-2026-1784729238","CLSA-2026-1784730197","CLSA-2026-1784801011","CLSA-2026-1784801979","CLSA-2026-1784805083","CLSA-2026-1784805092","CLSA-2026-1784986918","CLSA-2026-1784987022","CLSA-2026-1785147682","CLSA-2026-1786353802","CLSA-2026-1787042235","DEBIAN-CVE-2026-47729","EUVD-2026-44962","GHSA-8c37-pxjq-qwrg","MGASA-2026-0319","OESA-2026-2726","ROOT-OS-DEBIAN-12-CVE-2026-47729","ROOT-OS-DEBIAN-13-CVE-2026-47729","SUSE-SU-2026:24224-1","SUSE-SU-2026:4621-1","SUSE-SU-2026:4909-1","UBUNTU-CVE-2026-47729","USN-8435-1","USN-8941-1","openSUSE-SU-2026:11937-1","openSUSE-SU-2026:22080-1"],"status":"published","title":"Squid: Memory disclosure in FTP gateway","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01503,"percentile":0.74508,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-125","CWE-1289"],"published":"2026-06-12T00:00:00Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"pocgithub","id":"ashrafzaryouh/CVE-2026-47729","title":"ashrafzaryouh/CVE-2026-47729","date":"2026-06-21","url":"https://github.com/ashrafzaryouh/CVE-2026-47729"}],"fixes":[{"ecosystem":"Alpine:v3.23","package":"squid","fixed_in":["7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"squid","fixed_in":["7.6-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"squid","fixed_in":["6.13-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"squid","fixed_in":["5.7-2+deb12u6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["6.13-2+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["7.6-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","fixed_in":["3.5.12-1ubuntu7.16+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"squid","fixed_in":["4.10-1ubuntu1.13+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"squid","fixed_in":["5.9-0ubuntu0.22.04.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"squid","fixed_in":["6.14-0ubuntu0.24.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"squid","fixed_in":["6.14-0ubuntu0.25.10.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"squid","fixed_in":["7.2-2ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module_el8.4.0+2440+5e6341ce.2.tuxcare.els17"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els19"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els19"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-19.el9_6.1.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module_el8+2444+7329aae0.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-1.module_el8.5.0+2452+d4bb163c.tuxcare.els16"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1.tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.0.5.el7_9.99.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els14"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u6"}]}],"versions":["5.7-2","5.7-2+deb12u1","5.7-2+deb12u2","5.7-2+deb12u3","5.7-2+deb12u4","5.7-2+deb12u5"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-2+deb13u2"}]}],"versions":["6.13-2","6.13-2+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6-1"}]}],"versions":["6.13-2","7.1-1","7.2-1","7.2-2","7.4-1","7.5-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12-3.1.mga10"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-31.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-9.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-9.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-27.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-150600.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-150600.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-150600.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm7"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2","3.5.12-1ubuntu7.16+esm3","3.5.12-1ubuntu7.16+esm4","3.5.12-1ubuntu7.16+esm5","3.5.12-1ubuntu7.16+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm6"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1","3.5.27-1ubuntu1.14+esm2","3.5.27-1ubuntu1.14+esm3","3.5.27-1ubuntu1.14+esm4","3.5.27-1ubuntu1.14+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+esm3"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9","4.10-1ubuntu1.10","4.10-1ubuntu1.11","4.10-1ubuntu1.12","4.10-1ubuntu1.13","4.10-1ubuntu1.13+esm1","4.10-1ubuntu1.13+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-0ubuntu0.22.04.7"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3","5.7-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.1","5.9-0ubuntu0.22.04.2","5.9-0ubuntu0.22.04.3","5.9-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-0ubuntu0.24.04.4"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2","6.5-1ubuntu1","6.5-1ubuntu2","6.5-1ubuntu3","6.6-1ubuntu4","6.6-1ubuntu5","6.6-1ubuntu5.1","6.10-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.2","6.13-0ubuntu0.24.04.3","6.14-0ubuntu0.24.04.1","6.14-0ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-0ubuntu0.25.10.4"}]}],"versions":["6.13-1ubuntu1","6.13-1ubuntu2","6.13-1ubuntu3","6.13-1ubuntu4","6.13-1ubuntu4.1","6.14-0ubuntu0.25.10.1","6.14-0ubuntu0.25.10.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2-2ubuntu2.2"}]}],"versions":["6.13-1ubuntu4","6.13-1ubuntu5","7.2-2ubuntu1","7.2-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-0ubuntu0.22.04.7"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3","5.7-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.1","5.9-0ubuntu0.22.04.2","5.9-0ubuntu0.22.04.3","5.9-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-0ubuntu0.24.04.4"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2","6.5-1ubuntu1","6.5-1ubuntu2","6.5-1ubuntu3","6.6-1ubuntu4","6.6-1ubuntu5","6.6-1ubuntu5.1","6.10-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.2","6.13-0ubuntu0.24.04.3","6.14-0ubuntu0.24.04.1","6.14-0ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-0ubuntu0.25.10.4"}]}],"versions":["6.13-1ubuntu1","6.13-1ubuntu2","6.13-1ubuntu3","6.13-1ubuntu4","6.13-1ubuntu4.1","6.14-0ubuntu0.25.10.1","6.14-0ubuntu0.25.10.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2-2ubuntu2.2"}]}],"versions":["6.13-1ubuntu4","6.13-1ubuntu5","7.2-2ubuntu1","7.2-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm7"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2","3.5.12-1ubuntu7.16+esm3","3.5.12-1ubuntu7.16+esm4","3.5.12-1ubuntu7.16+esm5","3.5.12-1ubuntu7.16+esm6"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm6"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1","3.5.27-1ubuntu1.14+esm2","3.5.27-1ubuntu1.14+esm3","3.5.27-1ubuntu1.14+esm4","3.5.27-1ubuntu1.14+esm5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+esm3"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9","4.10-1ubuntu1.10","4.10-1ubuntu1.11","4.10-1ubuntu1.12","4.10-1ubuntu1.13","4.10-1ubuntu1.13+esm1","4.10-1ubuntu1.13+esm2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-0ubuntu0.22.04.8"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3","5.7-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.1","5.9-0ubuntu0.22.04.2","5.9-0ubuntu0.22.04.3","5.9-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.5","5.9-0ubuntu0.22.04.7"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-0ubuntu0.24.04.5"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2","6.5-1ubuntu1","6.5-1ubuntu2","6.5-1ubuntu3","6.6-1ubuntu4","6.6-1ubuntu5","6.6-1ubuntu5.1","6.10-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.2","6.13-0ubuntu0.24.04.3","6.14-0ubuntu0.24.04.1","6.14-0ubuntu0.24.04.2","6.14-0ubuntu0.24.04.4"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-160000.1.1"}]}],"bundled":5}],"products":[{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-8c37-pxjq-qwrg","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory"]},{"url":"https://github.com/squid-cache/squid/pull/2408","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://github.com/squid-cache/squid/pull/2409","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://github.com/squid-cache/squid/commit/865a131c7d557e68c965043d98c2eccae26deef8","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://github.com/squid-cache/squid/releases/tag/SQUID_7_6","tags":["x_refsource_MISC","Release Notes","web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-47729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47729","tags":["web","advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1784710881.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50012","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1784713205.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1784713308.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1784716497.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1784725992.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1784729238.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19131","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1784730197.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1784801011.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784801979.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1784805083.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1784805092.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1784986918.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1784987022.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785147682.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1786353802.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1787042235.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47729.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-47729","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0319.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35686","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/12/1","tags":["web","report"]},{"url":"https://ubuntu.com/security/notices/USN-8435-1","tags":["advisory"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00271.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2726","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624224-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237027","tags":["report"]},{"url":"https://bugzilla.suse.com/1260452","tags":["report"]},{"url":"https://bugzilla.suse.com/1260453","tags":["report"]},{"url":"https://bugzilla.suse.com/1260454","tags":["report"]},{"url":"https://bugzilla.suse.com/1268272","tags":["report"]},{"url":"https://bugzilla.suse.com/1268320","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50012","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264621-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264909-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216496","tags":["report"]},{"url":"https://bugzilla.suse.com/1217825","tags":["report"]},{"url":"https://bugzilla.suse.com/1223329","tags":["report"]},{"url":"https://bugzilla.suse.com/1228150","tags":["report"]},{"url":"https://bugzilla.suse.com/1252281","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62168","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-47729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47729","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8941-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-50012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-32748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-61642","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-47729","title":"Squid: Memory disclosure in FTP gateway","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-07-16T16:13:19.767Z","modified":"2026-07-17T18:07:10.084Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-125","CWE-1289"],"updated_at":"2026-11-02T13:36:40.478484Z"}],"euvd":[{"id":"EUVD-2026-44962","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-07-16T16:13:19Z","modified":"2026-07-17T18:07:10Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:19:50.451546Z"}],"nvd":[{"id":"CVE-2026-47729","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-07-16T17:16:57.217Z","modified":"2026-10-24T20:10:00.137Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-125","CWE-1289"],"updated_at":"2026-11-02T14:12:30.250437Z"}],"osv":[{"id":"ALPINE-CVE-2026-47729","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-07-16T17:16:57.217Z","modified":"2026-10-01T02:17:49.31562432Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"CVE-2026-47729","title":"Squid: Memory disclosure in FTP gateway","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-07-16T16:13:19.767Z","modified":"2026-10-28T11:11:20.601095876Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125","CWE-1289"],"updated_at":"2026-11-02T15:45:06.231145Z"},{"id":"DEBIAN-CVE-2026-47729","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-07-16T17:16:57.217Z","modified":"2026-10-25T09:47:30.643964253Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:56.444225Z"},{"id":"OESA-2026-2726","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\n[\u0026apos;Hi all,\u0026apos;, \u0026quot;CVE-2026-47729\\n\\nDue to a Improper Validation of Syntactic Correctness of Input\\nbug, Squid is vulnerable to a Out-of-bounds Read\\nattack against the FTP gateway.\\n\\nThis problem allows a trusted client to perform an Out-of-Bounds\\nRead from random unrelated transactions when accessing a\\nmisbehaving FTP server through Squid\u0026apos;s gateway feature.\\n\\n\u0026lt;\u0026quot;, \u0026apos;\u0026gt;\\n\\n\\n\\nCVE-2026-50012\\n\\nDue to an Improper Input Validation bug, Squid is vulnerable to\\na Heap-based Buffer Overflow attack against cache digests.\\n\\nThis problem allows a trusted server to perform a Heap-based\\nBuffer Overflow when sending maliciously crafted replies to\\ncache_digest request messages.\\n\\nThis attack is limited to Squid instances that have been\\ncompiled with the --enable-cache-digests option.\\n\\n\u0026lt;\u0026apos;, \u0026apos;\u0026gt;\u0026apos;, \u0026apos;Amos Jeffries\\nThe Squid Software Foundation\u0026apos;](CVE-2026-47729)\n\n[\u0026apos;Hi all,\u0026apos;, \u0026quot;CVE-2026-47729\\n\\nDue to a Improper Validation of Syntactic Correctness of Input\\nbug, Squid is vulnerable to a Out-of-bounds Read\\nattack against the FTP gateway.\\n\\nThis problem allows a trusted client to perform an Out-of-Bounds\\nRead from random unrelated transactions when accessing a\\nmisbehaving FTP server through Squid\u0026apos;s gateway feature.\\n\\n\u0026lt;\u0026quot;, \u0026apos;\u0026gt;\\n\\n\\n\\nCVE-2026-50012\\n\\nDue to an Improper Input Validation bug, Squid is vulnerable to\\na Heap-based Buffer Overflow attack against cache digests.\\n\\nThis problem allows a trusted server to perform a Heap-based\\nBuffer Overflow when sending maliciously crafted replies to\\ncache_digest request messages.\\n\\nThis attack is limited to Squid instances that have been\\ncompiled with the --enable-cache-digests option.\\n\\n\u0026lt;\u0026apos;, \u0026apos;\u0026gt;\u0026apos;, \u0026apos;Amos Jeffries\\nThe Squid Software Foundation\u0026apos;](CVE-2026-50012)","status":"published","published":"2026-06-24T11:11:39Z","modified":"2026-08-18T01:20:06.298751753Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"UBUNTU-CVE-2026-47729","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-06-12T00:00:00Z","modified":"2026-10-21T23:11:56.444154009Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:33.391918Z"},{"id":"AZL-92444","title":"CVE-2026-47729 affecting package squid for versions less than 6.13-5","description":"Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.","status":"published","published":"2026-07-16T17:16:57Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.880689Z"},{"id":"CLSA-2026-1784710881","title":"Fix CVE(s): CVE-2026-47729, CVE-2026-50012","description":"   * SECURITY UPDATE: out-of-bounds read in the FTP gateway directory-listing\n     parser when a TypeA/TypeB listing entry date is not followed by a filename\n     - debian/patches/CVE-2026-47729.patch: restrict parsing to the input buffer\n       in ftpListParseParts() by checking for a NUL byte before strchr(w_space)\n       in src/clients/FtpGateway.cc\n     - CVE-2026-47729\n   * SECURITY UPDATE: heap-based buffer overflow in cache digest reply handling\n     when a peer reply's on-the-wire size exceeds the declared mask_size\n     - debian/patches/CVE-2026-50012.patch: bound-check mask_offset + size\n       against mask_size before memcpy() in peerDigestSwapInMask() and abort the\n       fetch on overflow in src/peer_digest.cc\n     - CVE-2026-50012","status":"published","published":"2026-07-22T09:01:49Z","modified":"2026-10-26T09:31:52.322188623Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784713205","title":"Fix CVE(s): CVE-2026-47729, CVE-2026-50012","description":"   * SECURITY UPDATE: out-of-bounds read in FTP gateway listing parser\n     - debian/patches/CVE-2026-47729.patch: guard against a NUL byte\n       before strchr() in ftpListParseParts, preventing an out-of-bounds\n       read that could disclose memory from unrelated transactions\n     - CVE-2026-47729\n   * SECURITY UPDATE: heap buffer overflow in cache digest handling\n     - debian/patches/CVE-2026-50012.patch: bound the mask copy in\n       peerDigestSwapInMask so an on-the-wire payload larger than the\n       advertised mask size cannot overflow the heap buffer\n     - CVE-2026-50012","status":"published","published":"2026-07-22T11:21:53Z","modified":"2026-10-26T09:31:47.109045324Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784713308","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory\n  listing parser that could disclose memory from unrelated transactions\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling\n  when the on-the-wire payload exceeds the advertised mask size","status":"published","published":"2026-07-22T09:42:15Z","modified":"2026-10-26T09:31:50.616488955Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784716497","title":"Fix CVE(s): CVE-2026-47729, CVE-2026-50012","description":"   * SECURITY UPDATE: out-of-bounds read in FTP gateway directory-listing\n     parser\n     - debian/patches/CVE-2026-47729.patch: guard the whitespace-skipping\n       strchr(w_space, *copyFrom) checks in ftpListParseParts() with a\n       '*copyFrom \u0026\u0026' short-circuit so a listing date that is not followed\n       by a filename cannot advance parsing past the input buffer\n     - CVE-2026-47729\n   * SECURITY UPDATE: heap buffer overflow in cache digest reply handling\n     - debian/patches/CVE-2026-50012.patch: bounds-check the received mask\n       data size against the declared mask_size before the memcpy in\n       peerDigestSwapInMask(), aborting the digest fetch when the\n       on-the-wire size is larger than the mask\n     - CVE-2026-50012","status":"published","published":"2026-07-22T10:35:24Z","modified":"2026-10-26T09:32:05.526403765Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784725992","title":"squid34: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in FTP directory listing parsing when a TypeA/TypeB date is not followed by a filename\n- CVE-2026-50012: harden peerDigestSwapInMask against a cache digest reply whose on-the-wire size exceeds the declared mask_size (heap buffer overflow)","status":"published","published":"2026-07-22T13:13:39Z","modified":"2026-10-26T09:31:46.161633738Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784729238","title":"squid: Fix of 3 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in the FTP directory listing\n  parser (ftpListParseParts) by stopping the whitespace skip at the end\n  of the input buffer\n- CVE-2026-50012: fix heap buffer overflow in peerDigestSwapInMask by\n  rejecting cache digest replies whose mask data exceeds the declared\n  mask_size","status":"published","published":"2026-10-22T04:56:12Z","modified":"2026-10-26T09:31:45.417785322Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784730197","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in the FTP directory listing\n  parser (ftpListParseParts) by stopping the whitespace skip at the end\n  of the input buffer\n- CVE-2026-50012: fix heap buffer overflow in peerDigestSwapInMask by\n  rejecting cache digest replies whose mask data exceeds the declared\n  mask_size","status":"published","published":"2026-07-22T14:23:44Z","modified":"2026-10-26T09:31:40.2959723Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784801011","title":"Fix CVE(s): CVE-2026-47729, CVE-2026-50012","description":"   * SECURITY UPDATE: out-of-bounds read in FTP gateway listing parser\n     - debian/patches/CVE-2026-47729.patch: guard against a NUL byte\n       before strchr() in ftpListParseParts, preventing an out-of-bounds\n       read that could disclose memory from unrelated transactions\n     - CVE-2026-47729\n   * SECURITY UPDATE: heap buffer overflow in cache digest handling\n     - debian/patches/CVE-2026-50012.patch: bound the mask copy in\n       peerDigestSwapInMask so an on-the-wire payload larger than the\n       advertised mask size cannot overflow the heap buffer\n     - CVE-2026-50012","status":"published","published":"2026-07-23T10:04:01Z","modified":"2026-10-26T09:30:42.798568045Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784801979","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory\n  listing parser that could disclose memory from unrelated transactions\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling\n  when the on-the-wire payload exceeds the advertised mask size","status":"published","published":"2026-07-23T10:20:07Z","modified":"2026-10-26T09:31:21.635124423Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784805083","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling (peerDigestSwapInMask) by bounding mask data against the declared mask_size","status":"published","published":"2026-07-23T11:11:51Z","modified":"2026-10-26T09:31:58.183777046Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784805092","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling (peerDigestSwapInMask) by bounding mask data against the declared mask_size","status":"published","published":"2026-07-23T11:11:59Z","modified":"2026-10-26T09:31:55.711646179Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784986918","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory\n  listing parser that could disclose memory from unrelated transactions\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling\n  when the on-the-wire payload exceeds the advertised mask size","status":"published","published":"2026-07-25T13:42:10Z","modified":"2026-10-26T09:31:37.904498447Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784987022","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory\n  listing parser that could disclose memory from unrelated transactions\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling\n  when the on-the-wire payload exceeds the advertised mask size","status":"published","published":"2026-07-25T13:43:54Z","modified":"2026-10-26T09:31:51.132563587Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785147682","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory\n  listing parser that could disclose memory from unrelated transactions\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply\n  handling when the on-the-wire payload exceeds the advertised mask size","status":"published","published":"2026-07-27T10:21:36Z","modified":"2026-10-26T09:30:29.493576432Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1786353802","title":"squid: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling (peerDigestSwapInMask) by bounding mask data against the declared mask_size","status":"published","published":"2026-08-13T12:47:28Z","modified":"2026-10-26T09:31:42.801646643Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1787042235","title":"squid34: Fix of 2 CVEs","description":"- CVE-2026-47729: fix out-of-bounds read in FTP directory listing parsing when a TypeA/TypeB date is not followed by a filename\n- CVE-2026-50012: harden peerDigestSwapInMask against a cache digest reply whose on-the-wire size exceeds the declared mask_size (heap buffer overflow)","status":"published","published":"2026-08-18T20:54:56Z","modified":"2026-10-26T09:31:40.299645491Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"MGASA-2026-0319","title":"Updated squid packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nDue to a Improper Validation of Syntactic Correctness of Inputbug, Squid\nis vulnerable to a Out-of-bounds Read attack against the FTP gateway.\n(CVE-2026-47729)\nDue to an Improper Input Validation bug, Squid is vulnerable to a\nHeap-based Buffer Overflow attack against cache digests.\n(CVE-2026-50012)\n","status":"published","published":"2026-08-03T18:47:23Z","modified":"2026-08-03T19:00:05.117216677Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11937-1","title":"squid-7.7-2.1 on GA media","description":"These are all security issues fixed in the squid-7.7-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-30T00:00:00Z","modified":"2026-10-01T11:15:06.046226601Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22080-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).\n- CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).\n- CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).\n- CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic\n  correctness of input (bsc#1268272).\n- CVE-2026-50012: Improper Input Validation bug (bsc#1268320).\n\nChanges for squid:\n\nUpdate to 6.14:\n\n  - Do not leak HttpReply when checking http_reply_access (bsc#1237027)\n","status":"published","published":"2026-10-09T13:28:23Z","modified":"2026-10-19T17:23:12.683793511Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-47729","title":"CVE-2026-47729 in squid - Patched by Root","description":"Root has patched CVE-2026-47729 in the squid package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-25T15:02:02Z","modified":"2026-10-08T13:00:07.238922498Z","updated_at":"2026-11-02T15:53:32.298225Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-47729","title":"CVE-2026-47729 in rootio-squid - Patched by Root","description":"Root has patched CVE-2026-47729 in the rootio-squid package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-06-19T10:28:06Z","modified":"2026-08-27T14:00:04.423293862Z","updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"SUSE-SU-2026:24224-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).\n- CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).\n- CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).\n- CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic\n  correctness of input (bsc#1268272).\n- CVE-2026-50012: Improper Input Validation bug (bsc#1268320).\n\nChanges for squid:\n\nUpdate to 6.14:\n\n  - Do not leak HttpReply when checking http_reply_access (bsc#1237027)\n","status":"published","published":"2026-10-09T13:23:26Z","modified":"2026-10-21T17:23:11.047318494Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4621-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).\n- CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).\n- CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).\n- CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic\n  correctness of input (bsc#1268272).\n- CVE-2026-50012: Improper Input Validation bug (bsc#1268320).\n\nChanges for squid:\n  \n- Do not leak HttpReply when checking http_reply_access (bsc#1237027)\n- Updated to version 6.14\n","status":"published","published":"2026-10-12T07:24:06Z","modified":"2026-10-13T10:30:05.841997267Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4909-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496).\n- CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825).\n- CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of\n  credentials a trusted client uses to authenticate (bsc#1252281).\n- CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).\n- CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).\n- CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).\n- CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic\n  correctness of input (bsc#1268272).\n- CVE-2026-50012: Improper Input Validation bug (bsc#1268320).\n","status":"published","published":"2026-10-26T07:22:12Z","modified":"2026-10-26T20:15:05.607759754Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8435-1","title":"squid vulnerabilities","description":"It was discovered that Squid incorrectly handled FTP gateway processing\nunder certain circumstances, which could result in an out-of-bounds read. A\nremote attacker could use this issue to cause Squid to crash, resulting in\na denial of service, or possibly obtain sensitive information.\n(CVE-2026-47729)\n\nIt was discovered that Squid incorrectly handled cache digest processing\nunder certain circumstances, which could result in a heap-based buffer\noverflow. A remote attacker could use this issue to cause Squid to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2026-50012)","status":"published","published":"2026-06-16T14:27:13Z","modified":"2026-07-24T15:35:15.320664864Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8941-1","title":"squid, squid3 vulnerabilities","description":"It was discovered that Squid incorrectly handled certain HTTP Transfer-\nEncoding headers. An attacker could possibly use this issue to perform HTTP\nrequest smuggling attacks, bypass security mechanisms, or poison web\ncaches.  (CVE-2026-61642)\n\nIt was discovered that Squid incorrectly handled certain cache digest\nreplies, which could lead to a buffer overflow. A remote attacker could\npossibly use this issue to cause Squid to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and\nUbuntu 20.04 LTS. (CVE-2026-50012)\n\nIt was discovered that Squid incorrectly handled parsing certain FTP\ndirectory listings. A remote attacker could possibly use this issue to\nobtain sensitive information. This issue only affected Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-47729)\n\nIt was discovered that Squid incorrectly handled certain ICP traffic. A\nremote attacker could possibly use this issue to cause Squid to crash,\nresulting in a denial of service. This issue only affected Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-32748,\nCVE-2026-33526)\n\nIt was discovered that Squid incorrectly handled certain ICP requests. A\nremote attacker could possibly use this issue to obtain sensitive\ninformation. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nand Ubuntu 20.04 LTS. (CVE-2026-33515)","status":"published","published":"2026-10-20T13:59:52Z","modified":"2026-10-21T23:11:56.281723379Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}