squid-debuginfo vulnerabilities (Red Hat)
109 vulnerabilities.
squid-debuginfoRed HatDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...7.5 Highsquid-debuginfoRed HatAn issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with...8.8 Highsquid-debuginfoRed HatAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...5.9 Mediumsquid-debuginfoRed HatAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...9.8 Criticalsquid-debuginfoRed HatThe cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.6.1 Mediumsquid-debuginfoRed HatThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...7.5 Highsquid-debuginfoRed HatThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...7.5 Highsquid-debuginfoRed HatIncorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP...7.5 Highsquid-debuginfoRed HatStack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package...9.8 Criticalsquid-debuginfoRed HatDouble free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows...7.5 Highsquid-debuginfoRed Hatclient_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to...7.5 Highsquid-debuginfoRed Hatmime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...8.6 Highsquid-debuginfoRed Hatclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...8.6 Highsquid-debuginfoRed HatBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...8.1 Highsquid-debuginfoRed HatSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...3.7 Lowsquid-debuginfoRed HatMultiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow...8.1 Highsquid-debuginfoRed HatBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...8.8 Highsquid-debuginfoRed HatSquid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows...7.5 Highsquid-debuginfoRed Hathttp.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure...7.5 Highsquid-debuginfoRed Hathttp.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data...7.5 Highsquid-debuginfoRed HatThe Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not...7.5 Highsquid-debuginfoRed HatSquid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects,...7.5 Highsquid-debuginfoRed HatSquid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when...2.6 Lowsquid-debuginfoRed HatHttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to...5.0 Mediumsquid-debuginfoRed HatSquid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers...5.0 Mediumsquid-debuginfoRed HatBuffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3...7.5 Highsquid-debuginfoRed HatMultiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3...5.0 Mediumsquid-debuginfoRed HatThe idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows...5.0 Mediumsquid-debuginfoRed HatBuffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0...6.8 Mediumsquid-debuginfoRed HatThe string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2...5.0 Mediumsquid-debuginfoRed Hatlib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote...4.0 Mediumsquid-debuginfoRed HatThe strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to...5.0 Mediumsquid-debuginfoRed HatThe arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial...4.3 Mediumsquid-debuginfoRed HatThe "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0...5.0 Mediumsquid-debuginfoRed HatThe clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows...5.0 Mediumsquid-debuginfoRed HatSquid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle...5.0 Mediumsquid-debuginfoRed HatThe sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote...5.0 Mediumsquid-debuginfoRed Hatstore.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service ...5.0 Mediumsquid-debuginfoRed HatSquid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does...6.4 Mediumsquid-debuginfoRed HatSquid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or...7.5 Highsquid-debuginfoRed HatSquid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation...5.0 Mediumsquid-debuginfoRed HatRace condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie...2.6 Lowsquid-debuginfoRed HatSquid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via...5.0 Mediumsquid-debuginfoRed HatThe httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly...5.0 Mediumsquid-debuginfoRed HatSquid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain...5.0 Mediumsquid-debuginfoRed HatBuffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a...7.5 Highsquid-debuginfoRed HatSquid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response...5.0 Mediumsquid-debuginfoRed Hatsquid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username...7.5 Highsquid-debuginfoRed HatMemory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote...5.0 Mediumsquid-debuginfoRed HatThe WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a...5.0 Medium- Show moreLoading…