Astra Linux – vulnerability in squid

An issue was found in Squid versions 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, sensitive information about clients using the proxy may be exposed via an HTTPS request to an internal cache manager URL. This has been fixed in version 5.7...

Astra Linux – Vulnerability in Squid

A issue was discovered in Squid 4.x before 4.15, and in 5.x before 5.0.6. If a remote server sends a certain response header via HTTP or HTTPS, it can lead to a denial of service. This header can potentially appear in legitimate network traffic...

Astra Linux – Vulnerability in Squid

A vulnerability was discovered in Squid before versions 4.15 and 5.x before version 5.0.6. Due to incorrect parser validation, this vulnerability allows for a Denial of Service attack against the Cache Manager API. This enables a trusted client to trigger memory leaks, which over time can lead to...

Astra Linux – vulnerability in squid

Squid is a caching proxy for the Web that supports HTTP, HTTPS, FTP, and other protocols. Due to an error in checking function return values, Squid is vulnerable to denial-of-service attacks targeting its helper processes. This bug has been fixed in Squid version 6.5; users are advised to upgrade...

Astra Linux – Vulnerability in Squid

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, a Denial of Service can occur when processing long Gopher server responses due to improper buffer management...

Astra Linux – vulnerability in squid

Squid is an open source caching proxy for the Web that supports HTTP, HTTPS, FTP, and other protocols. Due to a bug known as “Collapse of Data into Unsafe Value,” Squid may be vulnerable to Denial of Service attacks targeting HTTP header parsing. This flaw enables a remote client or server to...

Astra Linux – vulnerability in squid

An issue was found in Squid versions prior to 4.15 and 5.x prior to 5.0.6. Due to a memory management bug, it is vulnerable to a Denial of Service attack targeting all clients using the proxy via HTTP Range request processing...

Astra Linux – vulnerability in squid

Squid is a caching proxy for the Web. Prior to version 7.5, Squid was vulnerable to Denial of Service when handling ICP traffic due to premature release of resources during their expected lifetime and heap Use-After-Free bugs. This issue enables a remote attacker to carry out a reliable and...

Astra Linux – vulnerability in squid

SQUID is vulnerable to HTTP request smuggling, which is caused by lenient chunked decoding; this enables a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

Astra Linux – vulnerability in squid

An issue was found in Squid versions prior to 4.15 and 5.x prior to 5.0.6. Due to an input validation bug, it is vulnerable to a Denial of Service attack targeting all clients using the proxy. A client sends an HTTP Range request to trigger this...

Astra Linux – vulnerability in squid

An over-read of a buffer was found in libntlmauth in Squid versions 2.5 through 5.6. Due to improper integer overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In certain configurations, plaintext credentials stored at these locatio...

Astra Linux – vulnerability in squid

In certain configurations, Squid running versions 4.14 and 5.x up to 5.0.5 allows information disclosure due to an out-of-bounds read in WCCP protocol data. This can be exploited as part of a remote code execution chain, as no one is present...

Astra Linux – vulnerability in squid

An issue was found in Squid versions prior to 4.15 and 5.x prior to 5.0.6. An integer overflow vulnerability enables a remote server to cause a Denial of Service by responding to HTTP Range requests. The issue is triggered by a header that is expected to appear in HTTP traffic without any malicio...

Astra Linux – vulnerability in squid

Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid versions prior to 6.6 are vulnerable to a Denial of Service attack targeting error responses from the Cache Manager. This issue enables a trusted client to trigger a Denial of Service by generating error pages fo...

Astra Linux – Vulnerability in Squid

Squid is a caching proxy for the Web. Due to an uncontrolled recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack involving HTTP request parsing. This issue allows a remote client to carr...

Astra Linux – Vulnerability in Squid

A issue was discovered in Squid before version 4.15 and 5.x before version 5.0.6. Due to a buffer-management bug, it allows for a denial of service. When resolving a request using the urn: scheme, the parser leaks a small amount of memory. However, there is an unspecified attack methodology that...

Astra Linux – Vulnerability in Squid

Squid is a web proxy cache. Starting from version 3.5.27 and before version 6.8, Squid may be vulnerable to a Denial of Service attack against the HTTP Chunked decoder due to an uncontrolled recursion bug. This issue allows a remote attacker to cause a Denial of Service when sending a crafted,...

Astra Linux – Vulnerability in Squid

Versions of Squid before 4.15 and 5.x before 5.0.6 allowed remote servers to cause a denial of service, affecting the availability of all clients through an HTTP response. The issue is triggered by a header that is expected to exist in HTTP traffic, without any malicious intent on the part of the...

Astra Linux – vulnerability in squid

Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid was vulnerable to Denial of Service when handling ICP traffic. This issue allowed a remote attacker to carry out a reliable and repeatable Denial of Service attack against the Squid service using the ICP...

Astra Linux – vulnerability in squid

Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid was vulnerable to out-of-bounds reads when handling ICP traffic. This issue allowed a remote attacker to receive small amounts of memory that might contain sensitive information by responding with...