453 matches found
CVE-2016-3948
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers...
The vulnerability of the Squid proxy server allows a hacker to cause a service failure.
The vulnerability of the Edge Side Includes parser of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure—such as the appearance of an error message “Assertion failure” or the termination of...
The vulnerability of the Squid proxy server allows a hacker to cause a service failure.
The vulnerability of the Squid proxy server exists due to the incorrect addition of information into String objects. Exploiting this vulnerability allows a remote attacker to cause a service failure—the appearance of an “Assertion failure” window, or the termination of the daemon. This occurs wit...
The vulnerability of the Squid proxy server allows a hacker to cause a service failure.
The vulnerability of the http.cc component in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure—such as the appearance of an “Assertion failure” message and the termination of the...
The vulnerability of the Squid proxy server allows a hacker to cause a service failure.
The vulnerability of the http.cc function in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause a service failure—such as the appearance of an “Assertion failure” message and the termination of the...
Squid Denial of Service Vulnerability (CNVD-2016-01441)
Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in the Edge Side Includes ESI parser in Squid versions 3.x prior...
Squid Denial of Service Vulnerability (CNVD-2016-01384)
Squid is a suite of proxy server and web caching server software. A security vulnerability exists in Squid that could be exploited by remote attackers to submit a special request that could crash an application and cause a denial of service...
UBUNTU-CVE-2016-2571
http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service assertion failure and daemon exit via a malformed response...
squid security update
CentOS Errata and Security Advisory CESA-2015:2378 Updated squid packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...
Squid Security Bypass Vulnerability (CNVD-2015-07339)
Squid full name Squid Cache is a suite of proxy server and Web caching server software. A security bypass vulnerability exists in Squid. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
The vulnerability of the Squid proxy server allows attackers to bypass existing restrictions and gain access to the server.
The vulnerability of the Squid proxy server is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions and gain access to the server by manipulating the CONNECT request...
CVE-2015-5400
Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cachepeer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request...
Squid HTTP Header Injection Vulnerability
Squid Cache or Squid for short is a popular proxy server and web caching server software. A vulnerability in Squid's handling of HTTP responses with specially crafted headers allows attackers to exploit the vulnerability for HTTP response splitting attacks...
[SECURITY] Fedora 20 Update: squid-3.3.13-1.fc20
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
squid: assertion failure in Range header processing (SQUID-2014:2)
A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid...
Squid Proxy 2.4/2.5 NULL URL Character Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to attacker-specified resources...
National Science Foundation Squid Proxy 2.3 Internet Access Control Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10315/info Squid proxy has been reported to be affected by an Internet access control bypass vulnerability. This issue is caused by a failure of the application to properly handle access controls when evaluating malformed...
Squid Web Proxy 2.2 cachemgr.cgi Unauthorized Connection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2059/info The 'cachemgr.cgi' module is a management interface for the Squid proxy service. It was installed by default in '/cgi-bin' by Red Hat Linux 5.2 and 6.0 installed with Squid. This script prompts for a host and...
Squid Proxy 2.5/2.6 FTP URI Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22079/info Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash affected proxy...
Squid Proxy DNS Response Spoofing (CVE-2005-1519; CVE-2007-3898)
There exists a vulnerability in Squid Web Proxy Cache in the processing of DNS lookups. The flaw is caused by predictable transaction identifiers in DNS requests generated by Squid. A remote attacker may leverage this vulnerability to use spoofed DNS responses to poison the DNS cache on the targe...