The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information by interpreting the created HTTP requests in an unexpected manner...

The vulnerability of the HttpHeader::getAuth function in the Squid proxy server allows a hacker to trigger a service denial or execute arbitrary code.

The vulnerability of the HttpHeader::getAuth function in the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the Proxy-Authentication component of the Squid proxy server allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Proxy-Authentication component of the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability in the cachemgr.cgi utility of the Squid proxy server allows a hacker to perform cross-site scripting attacks.

The vulnerability of the cachemgr.cgi utility of the Squid proxy server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks using the username or auth...

squid security update

CentOS Errata and Security Advisory CESA-2020:2040 An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

Information disclosure

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

CVE-2020-13135 concerns the D-Link DSP-W215 smart plug (version 1.26b03). According to the provided documents, the issue is an information-disclosure vulnerability where an attacker can intercept messages on the local network, demonstrated via a Squid Proxy. The CVE entry notes local-network acce...

PT-2020-13349 · Squid +1 · Squid Proxy +1

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W215 version 1.26b03 Description: The issue allows information disclosure by intercepting messages on the local network. This can be demonstrated using a Squid Proxy. Recommendations: For D-Link DSP-W215 version 1.26b03, consider...

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Important: Red Hat Security Advisory: squid:4 security update

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ALSA-2020:2041 Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow CVE-2019-12519 squid: improper access restriction upon Digest...

squid:4 security update

An update is available for libecap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Squid is a high-performance proxy caching server for web clients, supporting...

RLSA-2020:2041 Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow CVE-2019-12519 squid: improper access restriction upon Digest...

Important: Red Hat Security Advisory: squid:4 security update

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

The vulnerability of the Squid proxy server, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the Squid proxy server is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Squid proxy server, related to writing beyond the buffer limit, allows a hacker to cause a service failure.

The vulnerability of the Squid proxy server is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created URI scheme...

The vulnerability of the `append_domain` parameter in the Squid proxy server, related to the manipulation of inter-domain requests, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the appenddomain parameter in the Squid proxy server is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data and compromise its integrity...