Friday Squid Blogging: Giant Squid Washes Up on South African Beach

Fourteen feet long and 450 pounds. It was dead before it washed up. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

EulerOS 2.0 SP2 : squid (EulerOS-SA-2020-1666)

According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, suc...

Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1666)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Friday Squid Blogging: Human Cells with Squid-Like Transparency

I think we need more human organs with squid-like features. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Friday Squid Blogging: Shark vs. Squid

National Geographic has a photo of a 7-foot long shark that fought a giant squid and lived to tell the tale. Or, at least, lived to show off the suction marks on his skin. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blo...

The vulnerability of the Squid proxy server, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Squid proxy server arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Squid proxy server arises from insufficient validation of input data in the ext_lm_group_acl. This allows a hacker to terminate the Squid process and cause a service failure for all clients that use the proxy.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data in extlmgroupacl. Exploiting this vulnerability could allow a malicious actor to terminate the Squid process remotely and cause service failures for all clients using the proxy...

The vulnerability of the Squid proxy server, related to the lack of a authentication mechanism for url_regex, allows attackers to gain access to blocked resources.

The vulnerability of the Squid proxy server is related to the lack of authentication mechanism for urlregex. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to blocked resources...

The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to access features that can only be used by reverse proxies.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to gain access to features that can only be used by reverse proxies...

The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information by interpreting the created HTTP requests in an unexpected manner...

Amazon Linux AMI : squid (ALAS-2020-1378)

The version of squid installed on the remote host is prior to 3.5.20-15.39. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1378 advisory. An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls...

Important: squid

Issue Overview: An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function uses a fixed stack buffer to hold the expression while it's being evaluated. When processing the expression, it could either evaluat...

Friday Squid Blogging: Humboldt Squid Communication

Humboldt Squid communicate by changing their skin patterns and glowing. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

The vulnerability of the Proxy-Authentication component of the Squid proxy server allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Proxy-Authentication component of the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the HttpHeader::getAuth function in the Squid proxy server allows a hacker to trigger a service denial or execute arbitrary code.

The vulnerability of the HttpHeader::getAuth function in the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability in the cachemgr.cgi utility of the Squid proxy server allows a hacker to perform cross-site scripting attacks.

The vulnerability of the cachemgr.cgi utility of the Squid proxy server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks using the username or auth...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2020-1591)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to acce...

Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1591)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Friday Squid Blogging: Squid Can Edit Their Own Genomes

This is new news: Revealing yet another super-power in the skillful squid, scientists have discovered that squid massively edit their own genetic instructions not only within the nucleus of their neurons, but also within the axon -- the long, slender neural projections that transmit electrical...

CentOS: Security Advisory for squid (CESA-2020:2040)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...