squid vulnerabilities (Red Hat)
109 vulnerabilities.
squidRed HatDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...7.5 HighsquidRed HatAn issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with...8.8 HighsquidRed HatAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...5.9 MediumsquidRed HatAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...9.8 CriticalsquidRed HatThe cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.6.1 MediumsquidRed HatThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...7.5 HighsquidRed HatThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...7.5 HighsquidRed HatIncorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP...7.5 HighsquidRed HatStack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package...9.8 CriticalsquidRed HatDouble free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows...7.5 HighsquidRed Hatclient_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to...7.5 HighsquidRed Hatmime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...8.6 HighsquidRed Hatclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...8.6 HighsquidRed HatBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...8.1 HighsquidRed HatSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...3.7 LowsquidRed HatMultiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow...8.1 HighsquidRed HatBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...8.8 HighsquidRed HatSquid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows...7.5 HighsquidRed Hathttp.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure...7.5 HighsquidRed Hathttp.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data...7.5 HighsquidRed HatThe Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not...7.5 HighsquidRed HatSquid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects,...7.5 HighsquidRed HatSquid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when...2.6 LowsquidRed HatHttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to...5.0 MediumsquidRed HatSquid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers...5.0 MediumsquidRed HatBuffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3...7.5 HighsquidRed HatMultiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3...5.0 MediumsquidRed HatThe idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows...5.0 MediumsquidRed HatBuffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0...6.8 MediumsquidRed HatThe string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2...5.0 MediumsquidRed Hatlib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote...4.0 MediumsquidRed HatThe strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to...5.0 MediumsquidRed HatThe arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial...4.3 MediumsquidRed HatThe "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0...5.0 MediumsquidRed HatThe clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows...5.0 MediumsquidRed HatSquid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle...5.0 MediumsquidRed HatThe sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote...5.0 MediumsquidRed Hatstore.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service ...5.0 MediumsquidRed HatSquid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does...6.4 MediumsquidRed HatSquid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or...7.5 HighsquidRed HatSquid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation...5.0 MediumsquidRed HatRace condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie...2.6 LowsquidRed HatSquid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via...5.0 MediumsquidRed HatThe httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly...5.0 MediumsquidRed HatSquid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain...5.0 MediumsquidRed HatBuffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a...7.5 HighsquidRed HatSquid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response...5.0 MediumsquidRed Hatsquid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username...7.5 HighsquidRed HatMemory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote...5.0 MediumsquidRed HatThe WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a...5.0 Medium- Show moreLoading…