squid vulnerabilities (Debian)
127 vulnerabilities.
squidDebianAn issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI...5.9 MediumsquidDebianAn issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its...9.8 CriticalsquidDebianSquid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname)...6.1 MediumsquidDebianAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...7.5 HighsquidDebianAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...7.5 HighsquidDebianAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...7.3 HighsquidDebianAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...7.5 HighsquidDebianAn issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management,...7.5 HighsquidDebianAn issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP...5.3 MediumsquidDebianAn issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used ...6.1 MediumsquidDebianAn issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation,...7.5 HighsquidDebianAn issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap...9.8 CriticalsquidDebianAn issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP...9.1 CriticalsquidDebianDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...7.5 HighsquidDebianAn issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with...8.8 HighsquidDebianAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...5.9 MediumsquidDebianAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...9.8 CriticalsquidDebianThe cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.6.1 MediumsquidDebianSquid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for...6.1 MediumsquidDebianSquid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.5.9 MediumsquidDebianThis vulnerability allows remote attackers to deny service on vulnerable installations of The...5.9 MediumsquidDebianThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...7.5 HighsquidDebianThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...7.5 HighsquidDebianmime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...8.6 HighsquidDebianBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...8.8 HighsquidDebianThe FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6...5.9 MediumsquidDebianSquid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows...7.5 HighsquidDebianHeap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in...8.2 HighsquidDebianSquid before 3.5.6 does not properly handle CONNECT method peer responses when configured with...6.8 MediumsquidDebianSquid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when...2.6 LowsquidDebianCRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary...4.3 MediumsquidDebianThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...6.4 MediumsquidDebianThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...6.4 MediumsquidDebianOff-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP...6.8 MediumsquidDebianHttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to...5.0 MediumsquidDebiancachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote...5.0 MediumsquidDebianMultiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3...5.0 MediumsquidDebianThe htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7...5.0 MediumsquidDebianlib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote...4.0 MediumsquidDebianThe strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to...5.0 MediumsquidDebianSquid, when transparent interception mode is enabled, uses the HTTP Host header to determine the...5.4 MediumsquidDebianSquid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to...5.0 MediumsquidDebianThe arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial...4.3 MediumsquidDebianThe "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0...5.0 MediumsquidDebianThe clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows...5.0 MediumsquidDebianThe aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a...5.0 MediumsquidDebiansquid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of...5.0 MediumsquidDebianSquid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle...5.0 MediumsquidDebianThe sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote...5.0 MediumsquidDebianstore.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service ...5.0 Medium- Show moreLoading…