Skip to contentSquid-cache Squid vulnerabilities
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...CVE-2019-12528Fix availableEPSS 10.5%7.5 High
- squid-cache squid, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...CVE-2020-8517Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...CVE-2020-8450Fix availableEPSS 71.8%7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...CVE-2020-8449Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management,...CVE-2019-18679Fix availableEPSS 43.1%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP...CVE-2019-18678Fix available5.3 Medium
- squid-cache squid, canonical ubuntu linux, fedoraproject fedora +2 moreAn issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used ...CVE-2019-18677Fix available6.1 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation,...CVE-2019-18676Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap...CVE-2019-12526Fix availableEPSS 20.3%9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP...CVE-2019-12523Fix available9.1 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...CVE-2019-12854Fix availableEPSS 11.7%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with...CVE-2019-12527Fix availableEPSS 50.3%8.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...CVE-2019-12529Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...CVE-2019-12525Fix availableEPSS 24.4%9.8 Critical
- squid-cache squid, debian linux +1 moreThe cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.CVE-2019-13345Fix availableEPSS 74.5%6.1 Medium
- squid-cache squidSquid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for...CVE-2018-19131Public exploitFix available6.1 Medium
- squid-cache squid, debian linux +1 moreSquid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.CVE-2018-19132Fix available5.9 Medium
- squid-cache squidThis vulnerability allows remote attackers to deny service on vulnerable installations of The...CVE-2018-1172Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...CVE-2018-1000027Fix availableEPSS 12.9%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...CVE-2018-1000024Fix available7.5 High
- squid-cache squidIncorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1...CVE-2016-10003Fix available7.5 High
- squid-cache squid, debian linux +1 moreIncorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP...CVE-2016-10002Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreDouble free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows...CVE-2016-4556Fix availableEPSS 23.1%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to...CVE-2016-4555Fix availableEPSS 18.2%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moremime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...CVE-2016-4554Fix availableEPSS 38.9%8.6 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...CVE-2016-4553Fix availableEPSS 80.0%8.6 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...CVE-2016-4054Fix availableEPSS 77.6%8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...CVE-2016-4053Fix availableEPSS 14.4%3.7 Low
- squid-cache squid, canonical ubuntu linux +1 moreMultiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow...CVE-2016-4052Fix availableEPSS 12.9%8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...CVE-2016-4051Fix availableEPSS 18.3%8.8 High
- squid-cache squidThe FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6...CVE-2016-2390Fix availableEPSS 25.6%5.9 Medium
- squid-cache squidSquid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows...CVE-2016-3948Fix availableEPSS 35.3%7.5 High
- squid-cache squid, canonical ubuntu linux +1 moreHeap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in...CVE-2016-3947Fix availableEPSS 14.6%8.2 High
- squid-cache squidhttp.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure...CVE-2016-2572EPSS 10.2%7.5 High
- squid-cache squidhttp.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data...CVE-2016-2571Fix available7.5 High
- squid-cache squidThe Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not...CVE-2016-2570Fix available7.5 High
- squid-cache squidSquid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects,...CVE-2016-2569Public exploitFix availableEPSS 31.2%7.5 High
- squid-cache squid, opensuse +1 moreSquid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow...CVE-2014-9749EPSS 11.4%4.0 Medium
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid before 3.5.6 does not properly handle CONNECT method peer responses when configured with...CVE-2015-5400Fix availableEPSS 20.8%6.8 Medium
- squid-cache squid, fedoraproject fedora, oracle linux +1 more +3 moreSquid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when...CVE-2015-3455Fix availableEPSS 11.4%2.6 Low
- squid-cache squidCRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary...CVE-2015-0881Fix available4.3 Medium
- squid-cache squid, canonical ubuntu linux, oracle solaris +2 moreThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...CVE-2014-7142Fix availableEPSS 24.9%6.4 Medium
- squid-cache squidThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...CVE-2014-7141Fix availableEPSS 76.1%6.4 Medium
- squid-cache squid, oracle solaris +1 moreOff-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP...CVE-2014-6270Fix availableEPSS 23.3%6.8 Medium
- squid-cache squidHttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to...CVE-2014-3609Fix availableEPSS 56.2%5.0 Medium
- squid-cache squid, opensuse +1 moreSquid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers...CVE-2014-0128Fix availableEPSS 32.6%5.0 Medium
- squid-cache squidThe strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3...CVE-2013-1839EPSS 17.4%7.8 High
- squid-cache squid, opensuse +1 moreclient_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote...CVE-2013-4123Public exploitEPSS 80.5%5.0 Medium
- squid-cache squid, opensuse +1 moreBuffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3...CVE-2013-4115Fix availableEPSS 43.9%7.5 High
- squid-cache squid, canonical ubuntu linux +1 morecachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote...CVE-2013-0189Fix availableEPSS 21.9%5.0 Medium
- Show moreLoading…