Medium: squid

Issue Overview: An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes. CVE-2019-12528 This vulnerability allows remote attackers...

Squid Information Disclosure Vulnerability (CNVD-2020-50114)

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. The Squid product has an information disclosure vulnerability that can be exploited by an attack...

Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1884)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Friday Squid Blogging: How Squid Survive Freezing, Oxygen-Deprived Waters

Lots of interesting genetic details. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Friday Squid Blogging: How Squid Survive Freezing, Oxygen-Deprived Waters

Lots of interesting genetic details. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

Friday Squid Blogging: How Squid Survive Freezing, Oxygen-Deprived Waters

Lots of interesting genetic details. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

Ubuntu 20.04 LTS : Squid vulnerabilities (USN-4477-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4477-1 advisory. Amit Klein discovered that Squid incorrectly validated certain data. A remote attacker could possibly use this issue to perform an HTTP request smuggling...

Debian: Security Advisory (DSA-4751-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : Squid regression (USN-4446-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4446-2 advisory. USN-4446-1 fixed vulnerabilities in Squid. The update introduced a regression when using Squid with the icap or ecap protocols. This update fixes the...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2020-1884)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does...

Debian DSA-4751-1 : squid - security update

Several vulnerabilities were discovered in Squid, a fully featured web proxy cache, which could result in request splitting, request smuggling leading to cache poisoning and denial of service when processing crafted cache digest responses messages. C Tenable Network Security, Inc. The descriptive...

Squid 2.x < 4.13 / 5.x < 5.0.4 (SQUID-2020:8 and SQUID-2020:10)

According to its banner, the version of Squid running on the remote host is 2.x prior to 4.13 or 5.x prior to 5.0.4. It is,therefore, affected by multiple vulnerabilities: - An input-validation flaw exists related to handling HTTP and HTTPS traffic that allows HTTP request splitting leading to...

USN-4477-1 squid vulnerabilities

Amit Klein discovered that Squid incorrectly validated certain data. A remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. CVE-2020-15810 Régis Leroy discovered that Squid incorrectly validated certain data. A remote attacker...

[SECURITY] [DSA 4751-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4751-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4751-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4751-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 27, 2020 https://www.debian.org/security/faq -...

USN-4446-2: Squid regression

USN-4446-1 fixed vulnerabilities in Squid. The update introduced a regression when using Squid with the icap or ecap protocols. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jeriko One discovered that Squid incorrectly handled caching certain...

DSA-4751-1 squid - security update

Bulletin has no description...

Squid 2.x < 4.12 / 5.x < 5.0.3 (SQUID-2020:5, SQUID-2020:6 & SQUID-2020:7)

According to its banner, the version of Squid running on the remote host is 2.x prior to 4.12 or 5.x prior to 5.0.3. It is,therefore, affected by multiple vulnerabilities: - Multiple denial of service DoS vulnerabilities exist in the SMP cache and TLS handshake implementations of Squid. An...

CVE-2020-24606

A flaw was found in squid. A denial of service attack is possible due to an improper input validation. The highest threat from this vulnerability is to system availability. Mitigation Add the no-digest option to all cachepeer lines in squid.conf...

The vulnerability of the http/ContentLengthInterpreter.cc component in the Squid proxy server allows a hacker to manipulate cache content.

The vulnerability of the http/ContentLengthInterpreter.cc component in the Squid proxy server is related to HTTP request processing flaws. Exploiting this vulnerability allows a malicious actor to poison the cache contents using a specially crafted HTTP request...