Skip to content

Squid vulnerabilities

Products

Newest

squid web proxy cache Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the... CVE-2009-0801 Fix available 5.4 MediumMarch 4, 2009
squid Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to... CVE-2009-0478 Public exploitFix available EPSS 72.0% 5.0 MediumFebruary 8, 2009
squid The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial... CVE-2008-1612 Fix available 4.3 MediumApril 1, 2008
squid web proxy cache The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0... CVE-2007-6239 Fix available EPSS 26.7% 5.0 MediumDecember 4, 2007
squid The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows... CVE-2007-1560 Fix available EPSS 28.2% 5.0 MediumMarch 21, 2007
squid The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a... CVE-2007-0248 Fix available 5.0 MediumJanuary 16, 2007
squid squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of... CVE-2007-0247 Public exploitFix available EPSS 20.1% 5.0 MediumJanuary 16, 2007
squid, suse linux +1 more Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of... CVE-2005-3322 5.0 MediumOctober 27, 2005
squid The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP... CVE-2005-3258 5.0 MediumOctober 20, 2005
squid Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle... CVE-2005-2917 Fix available 5.0 MediumSeptember 30, 2005
squid The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote... CVE-2005-2796 Fix available 5.0 MediumSeptember 7, 2005
squid store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service ... CVE-2005-2794 Fix available 5.0 MediumSeptember 7, 2005
clam anti-virus clamav, gibraltar firewall, squid +2 more Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a... CVE-2005-1711 7.5 HighMay 24, 2005
squid Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does... CVE-2005-1519 Fix available 6.4 MediumMay 11, 2005
squid Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or... CVE-2005-1345 Fix available 7.5 HighApril 28, 2005
squid Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation... CVE-2005-0718 Fix available EPSS 12.5% 5.0 MediumMarch 12, 2005
squid Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie... CVE-2005-0626 Fix available 2.6 LowMarch 3, 2005
squid Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via... CVE-2005-0446 Fix available EPSS 41.1% 5.0 MediumFebruary 15, 2005
squid The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly... CVE-2005-0241 Fix available EPSS 69.7% 5.0 MediumFebruary 8, 2005
squid Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain... CVE-2005-0174 Fix available EPSS 50.5% 5.0 MediumFebruary 6, 2005
squid Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs),... CVE-2005-0194 Fix available 10.0 HighFebruary 4, 2005
squid Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response... CVE-2005-0175 Fix available EPSS 40.7% 5.0 MediumFebruary 4, 2005
squid squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username... CVE-2005-0173 Fix available EPSS 31.9% 7.5 HighFebruary 4, 2005
squid Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote... CVE-2005-0096 Fix available 5.0 MediumJanuary 19, 2005
squid The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a... CVE-2005-0095 Fix available EPSS 68.8% 5.0 MediumJanuary 15, 2005
squid Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and... CVE-2005-0094 Fix available 5.0 MediumJanuary 15, 2005
squid The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of... CVE-2005-0097 Fix available EPSS 10.6% 5.0 MediumJanuary 11, 2005
squid The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows... CVE-2004-2654 Fix available 5.0 MediumDecember 31, 2004
squid, gentoo linux, openpkg +2 more +4 more The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4... CVE-2004-0918 Fix available EPSS 15.8% 5.0 MediumOctober 21, 2004
squid The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM... CVE-2004-0832 Fix available EPSS 10.4% 5.0 MediumSeptember 28, 2004
squid The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass... CVE-2004-0189 Public exploitFix available EPSS 13.8% 7.5 HighMarch 15, 2004
opera software opera, squid +1 more Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a... CVE-2002-2414 4.3 MediumDecember 31, 2002
squid FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data... CVE-2002-0714 Fix available 7.5 HighJuly 26, 2002
squid Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow... CVE-2002-0715 Fix available 5.0 MediumJuly 23, 2002
squid Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service ... CVE-2002-0713 Fix available 7.5 HighJuly 23, 2002
squid Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12,... CVE-2002-0163 Public exploit EPSS 15.1% 7.5 HighMarch 26, 2002
squid, redhat linux +1 more Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of... CVE-2002-0069 2.6 LowMarch 8, 2002
squid, redhat linux +1 more Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump)... CVE-2002-0068 Public exploit 7.5 HighMarch 8, 2002
squid, redhat linux +1 more Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is... CVE-2002-0067 7.5 HighMarch 8, 2002
squid web proxy Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash)... CVE-2001-0843 5.0 MediumDecember 6, 2001
caldera openlinux server, immunix, mandrakesoft mandrake linux +5 more +7 more Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when... CVE-2001-1030 7.5 HighJuly 18, 2001