The vulnerability of the Squid proxy server arises from insufficient input validation when resolving resource identifiers like “urn:”, allowing attackers to trigger a service failure.

The vulnerability of the Squid proxy server exists due to insufficient input validation when resolving resource identifiers with the “urn:” prefix. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Squid proxy server arises from insufficient input validation when processing HTTP responses, allowing attackers to induce service failures.

The vulnerability of the Squid proxy server exists due to insufficient input validation during the processing of HTTP responses. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

DEBIAN-CVE-2021-31808

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack against all clients using the proxy. A client sends an HTTP Range request to trigger this...

CVE-2021-31808

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack against all clients using the proxy. A client sends an HTTP Range request to trigger this...

Important: Red Hat Security Advisory: squid:4 security update

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: improper input validation may allow a trusted client to perform HTTP request smuggling CVE-2020-25097 For more details about the security issues, including the...

ALSA-2021:1979 Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: improper input validation may allow a trusted client to perform HTTP request smuggling CVE-2020-25097 For more details about the security issues, including the...

Denial Of Service (DoS)

squid is vulnerable to denial of service DoS. The vulnerability exists through an improper input validation, affecting all clients using the proxy...

Squid 输入验证错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. An input validation error vulnerability exists in Squid. The vulnerability arises from insufficient validation of...

The vulnerability in the uri_whitespace configuration implementation of the Squid proxy server allows a hacker to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the uriwhitespace configuration in the Squid proxy server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely. This constitutes an HTTP Request Smuggling attack...

The vulnerability of the HTTP daisy authentication mechanism of the Squid proxy server, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the HTTP dijgest-authentication mechanism of the Squid proxy server is related to the exposure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism, related to integer overflow of the value, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for verifying the size of copied data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity...

The vulnerability of the ESIExpression::Evaluate function in the Squid proxy server lies in the fact that it allows the output of operations within acceptable data buffer limits. This enables attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ESIExpression::Evaluate function of the Squid proxy server is related to the execution of operations within acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability of Squid’s ESI element processing mechanism, which is related to the operation being brought within the allowable data buffer limits, allows a hacker to cause a service failure.

The vulnerability of the Squid proxy server’s ESI element processing mechanism lies in the ability to limit the execution of operations within acceptable data buffer limits. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the SNMP proxy server Squid lies in the lack of resource release after the expiration of its valid period of operation. This allows a hacker to trigger a service failure.

The vulnerability of the SNMP proxy server Squid lies in the lack of resource release after the expiration of its valid period of operation. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Squid 缓冲区错误漏洞

Squid is a caching and forwarding HTTP web proxy. Squid suffers from a WCCP protocol data out-of-bounds read vulnerability. An attacker could exploit this vulnerability to obtain information...

The vulnerability of the Squid proxy server, related to the execution of operations beyond the buffer in memory, allows attackers to gain access to protected information.

The vulnerability of the Squid proxy server is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information by sending specially crafted requests...

Moderate: Red Hat Security Advisory: squid:4 security, bug fix, and enhancement update

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: squid:4 security update

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A...