Lucene search
+L

550 matches found

RedHat Linux
RedHat Linux
added 2022/07/07 11:00 a.m.10 views

squid: DoS when processing gopher server responses

A vulnerability was found in squid Web proxy cache server. This issue occurs due to improper buffer management while processing Gopher server responses. This flaw leads to a remote denial of service or a crash if it receives specially crafted network traffic, either by mistake or a malicious acto...

6.5CVSS7.2AI score0.04845EPSS
SaveExploits0References5
OSV
OSV
added 2022/07/07 10:38 a.m.22 views

RLSA-2022:5526 Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: DoS when processing gopher server responses CVE-2021-46784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

7.5CVSS7AI score0.04845EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2022/07/07 10:38 a.m.32 views

squid:4 security update

An update is available for squid, libecap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Squid is a high-performance proxy caching server for web clients,...

6.5CVSS0.04845EPSS
SaveExploits0
AlmaLinux
AlmaLinux
added 2022/07/07 12:00 a.m.55 views

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: DoS when processing gopher server responses CVE-2021-46784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

6.5CVSS6.9AI score0.04845EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2022/07/07 12:00 a.m.63 views

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: DoS when processing gopher server responses CVE-2021-46784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

6.5CVSS0.1AI score0.04845EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/07/07 12:00 a.m.27 views

Fedora: Security Advisory for squid (FEDORA-2022-0fa51087e7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.9AI score0.04845EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.14 views

Fedora: Security Advisory for golang-github-yuin-gopher-lua (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Mageia
Mageia
added 2022/07/05 7:11 p.m.64 views

Updated squid packages fix security vulnerability

Denial of Service in Gopher Processing. CVE-2021-46784...

6.5CVSS2.9AI score0.04845EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/05 7:11 p.m.11 views

MGASA-2022-0249 Updated squid packages fix security vulnerability

Denial of Service in Gopher Processing. CVE-2021-46784...

6.5CVSS6.6AI score0.04845EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:00 a.m.12 views

The vulnerability of the Gopher network protocol implementation in Squid proxy servers allows attackers to induce service failures.

The vulnerability of the Gopher network protocol implementation in Squid proxies relates to the use of the assert function or similar operators. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted response to the proxy server...

7.8CVSS6.7AI score0.04845EPSS
SaveExploits0References12Affected Software6
OSV
OSV
added 2022/07/01 11:05 a.m.6 views

OESA-2022-1732 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: A vulnerability was found in squid. Due to improper buffer management Squid is vulnerable...

7.5CVSS7AI score0.04845EPSS
SaveExploits0References2
Redos
Redos
added 2022/06/28 12:00 a.m.34 views

ROS-20220628-03

A vulnerability in the Squid caching proxy server is related to assertion reachability when processing responses to the from the Gopher server. Exploitation of the vulnerability could allow an attacker acting remotely to send a specially crafted response to the proxy server and perform a denial o...

6.5CVSS6.6AI score0.04845EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/06/24 6:05 a.m.52 views

CVE-2021-46784

A vulnerability was found in squid Web proxy cache server. This issue occurs due to improper buffer management while processing Gopher server responses. This flaw leads to a remote denial of service or a crash if it receives specially crafted network traffic, either by mistake or a malicious acto...

7.5CVSS3.9AI score0.04845EPSS
SaveExploits0References4
Veracode
Veracode
added 2022/06/23 7:20 p.m.32 views

Denial Of Service (DoS)

squid is vulnerable to denial of service attacks. The vulnerability exists via Gopher Processing component which allows an attacker to cause an application crash...

6.5CVSS3.5AI score0.04845EPSS
SaveExploits0References11Affected Software6
OpenVAS
OpenVAS
added 2022/06/23 12:00 a.m.21 views

Ubuntu: Security Advisory (USN-5491-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.04845EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/22 2:03 p.m.6 views

USN-5491-1 squid, squid3 vulnerability

Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service...

6.5CVSS7.2AI score0.04845EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2022/06/22 2:03 p.m.86 views

USN-5491-1: Squid vulnerability

Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service...

6.5CVSS6.7AI score0.04845EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/06/18 12:00 a.m.12 views

Squid 资源管理错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in several versions of Squid that stems from an accessible assertion in the...

6.5CVSS6.6AI score0.04845EPSS
SaveExploits0References27
Huntr
Huntr
added 2022/03/29 4:18 a.m.36 views

SSRF on index.php/cobrowse/proxycss/

Description Live Helper Chat is vulnerable to SSRF on the /index.php/cobrowse/proxycss endpoint. It's possible to make internal requests and see the response as an authenticated user, it's also possible to make an request with any protocol using goppher://. Proof of Concept 1. Request...

5.5CVSS0.4AI score0.00955EPSS
SaveExploits1
OSV
OSV
added 2021/12/31 12:00 a.m.9 views

UBUNTU-CVE-2021-46784

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses...

6.5CVSS7.3AI score0.04845EPSS
SaveExploits0References4
Rows per page
Query Builder