Lucene search
+L

6154 matches found

OSV
OSV
added 2026/04/28 1:48 p.m.12 views

CLSA-2026-1777384121 squid: Fix of 3 CVEs

CVE-2019-12521: fix ESI parser off-by-one heap overflow by enforcing a stack-depth limit and throwing on overflow - CVE-2019-12524 already addressed by the CVE-2019-12520 backport same fix upstream; see Squid advisory SQUID-2019:4...

9.8CVSS6.9AI score0.05765EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.6 views

RHEL 9 : squid (RHSA-2026:10255)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:10255 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: Squid: Deni...

9.2CVSS5.7AI score0.08942EPSS
SaveExploits0References6
OSV
OSV
added 2026/04/25 8:50 a.m.8 views

CLSA-2026-1776878817 squid: Fix of 13 CVEs

CVE-2018-1000027: fix NULL pointer dereference in clientFollowXForwardedForCheck for transactions without a client connection - CVE-2018-19131: fix XSS via X.509 certificate fields rendered unescaped in SSL error pages - CVE-2019-12520: prevent cache poisoning by suppressing URL userinfo from...

9.8CVSS6.8AI score0.74477EPSS
SaveExploits2References1
Fedora
Fedora
added 2026/04/25 1:56 a.m.8 views

[SECURITY] Fedora 44 Update: tinyproxy-1.11.2-7.fc44

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a small network setting, where a larger proxy like Squid would either be too resource intensive, or a security risk...

8.7CVSS5.2AI score0.00899EPSS
SaveExploits1
Schneier on Security
Schneier on Security
added 2026/04/24 9:3 p.m.9 views

Friday Squid Blogging: How Squid Survived Extinction Events

Science news: Scientists have finally cracked a long-standing mystery about squid and cuttlefish evolution by analyzing newly sequenced genomes alongside global datasets. The research reveals that these bizarre, intelligent creatures likely originated deep in the ocean over 100 million years ago,...

5.5AI score
SaveExploits0
OSV
OSV
added 2026/04/24 6:16 p.m.11 views

CLSA-2026-1777054556 squid: Fix of 2 CVEs

CVE-2022-41317: fix exposure of sensitive cache manager information via non-HTTP URI schemes due to typo in default manager ACL regex - CVE-2023-49288: fix use-after-free in StoreEntry::startWriting reachable via oversized replies with collapsedforwarding enabled...

8.6CVSS6.9AI score0.04777EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/24 10:6 a.m.6 views

RHSA-2026:10257 Red Hat Security Advisory: squid security update

Bulletin has no description...

7.5CVSS5AI score0.08942EPSS
SaveExploits0References17
OSV
OSV
added 2026/04/24 10:6 a.m.8 views

RHSA-2026:10255 Red Hat Security Advisory: squid security update

Bulletin has no description...

7.5CVSS5AI score0.08942EPSS
SaveExploits0References17
OSV
OSV
added 2026/04/24 10:6 a.m.4 views

RHSA-2026:10256 Red Hat Security Advisory: squid security update

Bulletin has no description...

7.5CVSS4.8AI score0.08942EPSS
SaveExploits0References17
RedHat Linux
RedHat Linux
added 2026/04/24 1:10 a.m.12 views

squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling

A flaw was found in Squid. A remote attacker can exploit a heap Use-After-Free vulnerability when handling ICP Internet Cache Protocol traffic. This allows them to perform a reliable and repeatable Denial of Service DoS attack, making the Squid service unavailable. This attack is limited to...

9.2CVSS5.7AI score0.08942EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/24 1:10 a.m.19 views

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.2CVSS5.8AI score0.08942EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/24 1:10 a.m.12 views

Squid: Squid: Denial of Service via crafted ICP traffic

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP Internet Cache Protocol traffic. This can lead to a Denial of Service DoS due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments...

8.7CVSS5.7AI score0.08931EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/23 11:14 p.m.13 views

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.2CVSS5.8AI score0.08942EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/23 11:14 p.m.10 views

squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling

A flaw was found in Squid. A remote attacker can exploit a heap Use-After-Free vulnerability when handling ICP Internet Cache Protocol traffic. This allows them to perform a reliable and repeatable Denial of Service DoS attack, making the Squid service unavailable. This attack is limited to...

9.2CVSS5.7AI score0.08942EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/23 11:14 p.m.12 views

Squid: Squid: Denial of Service via crafted ICP traffic

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP Internet Cache Protocol traffic. This can lead to a Denial of Service DoS due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments...

8.7CVSS5.7AI score0.08931EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/23 11:11 p.m.11 views

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.2CVSS5.8AI score0.08942EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/23 11:11 p.m.9 views

squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling

A flaw was found in Squid. A remote attacker can exploit a heap Use-After-Free vulnerability when handling ICP Internet Cache Protocol traffic. This allows them to perform a reliable and repeatable Denial of Service DoS attack, making the Squid service unavailable. This attack is limited to...

9.2CVSS5.7AI score0.08942EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/23 11:11 p.m.12 views

Squid: Squid: Denial of Service via crafted ICP traffic

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP Internet Cache Protocol traffic. This can lead to a Denial of Service DoS due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments...

8.7CVSS5.7AI score0.08931EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:0 a.m.7 views

RHEL 9 : squid (RHSA-2026:10257)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:10257 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: Squid: Deni...

9.2CVSS5.8AI score0.08942EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:0 a.m.10 views

RHEL 9 : squid (RHSA-2026:10256)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:10256 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: Squid: Deni...

9.2CVSS5.8AI score0.08942EPSS
SaveExploits0References6
Rows per page
Query Builder