UBUNTU-CVE-2016-10002

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to prob...

UBUNTU-CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

Squid HTTP proxy information disclosure vulnerability

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. An information disclosure vulnerability exists in the Squid HTTP proxy. An attacker can exploit...

Squid Proxy ESI Response Processing Denial of Service (CVE-2016-4555)

A denial of service vulnerability has been reported in the Edge Side Includes ESI component of the Squid proxy. The vulnerability is due to incorrect pointer handling when processing ESI responses. A remote attacker could exploit this vulnerability by sending crafted ESI response data to the targ...

CentOS 6 : squid (CESA-2016:1573)

An update for squid is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

[SECURITY] [DLA 558-1] squid security update

Package : squid Version : 2.7.STABLE9-4.1+deb7u2 CVE ID : CVE-2016-4554 A security issue has been discovered in the Squid chaching proxy, on its 2.7.STABLE9 version branch. CVE-2016-4554 Jianjun Chen found that Squid was vulnerable to a header smuggling attack that could lead to cache poisoning a...

The vulnerability of the Squid HTTP Proxy Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

An “off-by-one error” in the snmpHandleUdp function in snmpcore.cc in Squid when using the SNMP port allows malicious actors to trigger a service failure or execute arbitrary code through a specially crafted UDP SNMP request, resulting in a buffer overflow in the dynamic memory...

Squid Proxy ESI Component Stack Buffer Overflow (CVE-2016-4054)

A stack-based buffer overflow vulnerability has been reported in the Edge Side Includes ESI component of the Squid proxy. The vulnerability is due to improper handling of ESI response packets. A remote attacker could exploit this vulnerability by sending crafted ESI response data to the target...

Squid Squoison Host Header Cache Poisoning (CVE-2016-4553)

A cache poisoning vulnerability exists in Squid proxy when configured as a transparent proxy. The flaw is caused by improper inspection of the Host header against the URI in the HTTP request line. An attacker can exploit this flaw by sending a crafted request to some website through the proxy...

Moderate: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

squid: SegFault from ESIInclude::Start

A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process...

RHEL 6 : squid (RHSA-2016:1138)

An update for squid is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Squid Double Release Vulnerability

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A double-release vulnerability exists in the Esi.cc file in Squid versions 3.5.18 prior to 3.x a...

CVE-2016-4555

clientsiderequest.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service crash via crafted Edge Side Includes ESI responses...

The vulnerability of the Squid proxy server allows a hacker to cause a service failure.

The vulnerability of the FwdState::connectedToPeer method FwdState.cc in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause a service failure application termination by using an unencrypted HTTP message...

Stack overflow

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes ESI responses, related to incorrect use of assert and compiler optimization...

UBUNTU-CVE-2016-4054

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes ESI responses...

Squid HTTP Caching Proxy Buffer Overflow Vulnerability (CNVD-2016-02511)

Squid is a suite of proxy server and web caching server software. Squid suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request, crash an application, or execute arbitrary code...

Squid HTTP Caching Proxy Buffer Overflow Vulnerability (CNVD-2016-02509)

Squid is a suite of proxy server and web caching server software. Squid suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request, crash an application, or execute arbitrary code...