Lucene search
+L

4615 matches found

osv_alsa
osv_alsa
•added 2024/01/03 12:00 a.m.•41 views

ALSA-2024:0046 Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: Denial of Service in SSL Certificate validation CVE-2023-46724 squid: NULL pointer dereference in the gopher protocol code CVE-2023-46728 squid: Buffer over-read...

8.6CVSS8.4AI score0.88144EPSS
SaveExploits0References10
osv_suse
osv_suse
•added 2023/12/29 10:05 a.m.•48 views

SUSE-RU-2023:4991-1 Recommended update for mariadb104

This update for mariadb104 fixes the following issues: - Implement version 10.4 of MariaDB jscPED-2455: It is possible to use more than one authentication plugin for each user account. The root user account is being created with the ability to use two authentication plugins. All user accounts,...

10CVSS6.8AI score0.6773EPSS
SaveExploits113References419
osv_clsa
osv_clsa
•added 2023/12/21 6:45 p.m.•16 views

CLSA-2023-1703184336 Fix CVE(s): CVE-2023-49285, CVE-2023-49286

SECURITY UPDATE: Buffer OverRead in RFC 1123 date/time - debian/patches/CVE-2023-49285.patch: Fix date parsing in RFC 1123 - CVE-2023-49285 SECURITY UPDATE: Denial of Service attack against Helper process management - debian/patches/CVE-2023-49286.patch: Add exit without asserting when helper...

8.6CVSS7.1AI score0.88144EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2023/12/21 6:44 p.m.•17 views

CLSA-2023-1703184270 Fix CVE(s): CVE-2023-49285, CVE-2023-49286

SECURITY UPDATE: Buffer OverRead in RFC 1123 date/time - debian/patches/CVE-2023-49285.patch: Fix date parsing in RFC 1123 - CVE-2023-49285 SECURITY UPDATE: Denial of Service attack against Helper process management - debian/patches/CVE-2023-49286.patch: Add exit without asserting when helper...

8.6CVSS7.3AI score0.88144EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2023/12/21 6:42 p.m.•15 views

CLSA-2023-1703184171 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88144EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2023/12/21 6:40 p.m.•19 views

CLSA-2023-1703184036 squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88144EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2023/12/21 6:30 p.m.•15 views

CLSA-2023-1703183411 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88144EPSS
SaveExploits0References1
CloudLinux
CloudLinux
•added 2023/12/21 6:30 p.m.•49 views

squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.3AI score0.88144EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2023/12/21 6:27 p.m.•16 views

CLSA-2023-1703183242 squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88144EPSS
SaveExploits0References1
CloudLinux
CloudLinux
•added 2023/12/21 6:27 p.m.•50 views

squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.3AI score0.88144EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2023/12/21 6:16 p.m.•19 views

CLSA-2023-1703182573 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88144EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2023/12/21 5:58 p.m.•18 views

CLSA-2023-1703181485 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.2AI score0.88144EPSS
SaveExploits0References1
osv_oesa
osv_oesa
•added 2023/12/15 11:06 a.m.•13 views

OESA-2023-1932 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buff...

8.6CVSS6.9AI score0.88144EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2023/12/14 1:24 p.m.•5 views

callcentrehelper.com Cross Site Scripting vulnerability OBB-3813532

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Amazon
Amazon
•added 2023/12/14 12:00 a.m.•13 views

Medium: squid

Issue Overview: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to...

8.6CVSS6.8AI score0.88144EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/12/13 12:00 a.m.•57 views

SUSE SLES12 Security Update : squid (SUSE-SU-2023:4724-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4724-1 advisory. - CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow bsc1217813 - CVE-2023-49286: Fixed Denial of Service...

8.6CVSS7.4AI score0.88144EPSS
SaveExploits0References8
osv_suse
osv_suse
•added 2023/12/12 10:08 a.m.•9 views

SUSE-SU-2023:4724-1 Security update for squid

This update for squid fixes the following issues: - CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow bsc1217813 - CVE-2023-49286: Fixed Denial of Service vulnerability in helper process management bsc1217815 - Fix X-Forwarded-For Stack Overflow bsc1217654...

8.6CVSS8.6AI score0.88144EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/12/06 2:04 a.m.•8 views

SUSE CVE-2023-49286

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There a...

8.6CVSS8.3AI score0.10352EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2023/12/05 12:40 p.m.•58 views

CVE-2023-49286

A flaw was found in Squid due to an incorrect check of the return value in the helper process management. This issue may allow attackers to perform remote denial of service. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

7.5CVSS8.4AI score0.10352EPSS
SaveExploits0References3
Veracode
Veracode
•added 2023/12/05 6:44 a.m.•47 views

Denial Of Service (DoS)

libsquid.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the ipcCreate function of ipc.cc due to an incorrect check for a return value. This allows an attacker to cause an application crash through the Helper process management...

8.6CVSS6.7AI score0.10352EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder