Lucene search
K

59 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в squid

Squid is a caching proxy for the web that supports HTTP, HTTPS, FTP, and other protocols. Due to an out-of-bounds write vulnerability when assigning ESI variables, Squid is susceptible to a memory corruption error. This error can lead to a denial-of-service attack...

6.3CVSS6.6AI score0.01302EPSS
Exploits0References2
OSV
OSV
added 2026/04/28 3:20 p.m.2 views

CLSA-2026-1777389615 Fix CVE(s): CVE-2024-45802

SECURITY UPDATE: multiple vulnerabilities in Edge Side Includes ESI processing - debian/rules: build with --disable-esi to remove the vulnerable ESI response processor matches the upstream Squid 6.10 default, where ESI support is disabled by default. - debian/control: drop libexpat1-dev and...

7.5CVSS5.8AI score0.00922EPSS
Exploits0References1
OSV
OSV
added 2025/10/10 7:23 a.m.2 views

SUSE-SU-2025:03521-1 Security update for squid

This update for squid fixes the following issues: - CVE-2025-59362: fixed buffer overflow bsc1250627 - CVE-2024-37894: fixed denial of service in ESI processing bsc1227086 - CVE-2024-33427: fixed possible buffer overread leading to denial of service bsc1225417...

6.3CVSS7.3AI score0.01302EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-5056

Malware in sbrugna...

4.3CVSS6.5AI score0.16544EPSS
Exploits0References23
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-17508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0...

7.5CVSS7.2AI score0.02656EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2016-2570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Edge Side Includes ESI parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP...

7.5CVSS7.4AI score0.05488EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/11/18 1:40 a.m.3 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/18 1:33 a.m.4 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/18 1:31 a.m.4 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/14 9:47 p.m.3 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/14 8:34 p.m.3 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/14 3:36 p.m.5 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/14 2:51 p.m.2 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/14 11:53 a.m.3 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/14 6:19 a.m.4 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/14 6:12 a.m.6 views

squid: Denial of Service processing ESI response content

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content...

7.5CVSS5.7AI score0.00922EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2024/10/28 3:25 p.m.19 views

CVE-2024-45802

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content. Mitigation This bug was mitigated by the default upstream build configuration of Squid since version 6....

7.5CVSS6.6AI score0.00922EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/08/12 12:0 a.m.6 views

Edge Side Includes Injection

Edge Side Includes ESI is a markup language used for dynamic web content assembly. It allows web developers to cache parts of web pages at the edge servers, reducing server load and improving page load times. However, when ESI is improperly implemented, it can be vulnerable to ESI Injection...

7.3AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/07/25 8:42 a.m.4 views

squid: Out-of-bounds write error may lead to Denial of Service

A flaw was found in Squid. An out-of-bounds write can be triggered when an Edge Side Includes ESI variable is assigned to a value not in the standard ASCII range, for example, multi-byte characters. This flaw allows a trusted server to crash Squid while processing an ESI response content, resulti...

6.3CVSS5.7AI score0.01302EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.1 views

Squid security vulnerability

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in Squid that stems from an out-of-bounds write error when allocating ESI variables,...

6.3CVSS7AI score0.01302EPSS
Exploits0References5
Rows per page
Query Builder