squid3 vulnerabilities (Ubuntu)
89 vulnerabilities.
squid3UbuntuAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...7.5 Highsquid3UbuntuAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...7.5 Highsquid3UbuntuAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...7.3 Highsquid3UbuntuAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...7.5 Highsquid3UbuntuAn issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management,...7.5 Highsquid3UbuntuAn issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP...5.3 Mediumsquid3UbuntuAn issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used ...6.1 Mediumsquid3UbuntuAn issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation,...7.5 Highsquid3UbuntuAn issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap...9.8 Criticalsquid3UbuntuAn issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP...9.1 Criticalsquid3UbuntuAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...5.9 Mediumsquid3UbuntuAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...9.8 Criticalsquid3UbuntuThe cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.6.1 Mediumsquid3UbuntuSquid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.5.9 Mediumsquid3UbuntuThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...7.5 Highsquid3UbuntuThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...7.5 Highsquid3UbuntuIncorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1...7.5 Highsquid3UbuntuIncorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP...7.5 Highsquid3UbuntuDouble free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows...7.5 Highsquid3Ubuntuclient_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to...7.5 Highsquid3Ubuntumime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...8.6 Highsquid3Ubuntuclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...8.6 Highsquid3UbuntuBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...8.1 Highsquid3UbuntuSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...3.7 Lowsquid3UbuntuMultiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow...8.1 Highsquid3UbuntuBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...8.8 Highsquid3UbuntuSquid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows...7.5 Highsquid3UbuntuHeap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in...8.2 Highsquid3Ubuntuhttp.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data...7.5 Highsquid3UbuntuThe Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not...7.5 Highsquid3UbuntuSquid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects,...7.5 Highsquid3UbuntuSquid before 3.5.6 does not properly handle CONNECT method peer responses when configured with...6.8 Mediumsquid3UbuntuSquid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when...2.6 Lowsquid3UbuntuThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...6.4 Mediumsquid3UbuntuThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...6.4 Mediumsquid3UbuntuOff-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP...6.8 Mediumsquid3UbuntuHttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to...5.0 Mediumsquid3UbuntuSquid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers...5.0 Medium