[SECURITY] [DLA 45-1] squid3 security update

Package : squid3 Version : 3.1.6-1.2+squeeze4 CVE ID : CVE-2014-3609 CVE-2014-3609: Denial of Service in Range header processing. Ignore Range headers with unidentifiable byte-range values. If squid is unable to determine the byte value for ranges, treat the header as invalid...

DLA-45-1 squid3 - security update

Bulletin has no description...

[SECURITY] [DSA 3014-1] squid3 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3014-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 28, 2014 http://www.debian.org/security/faq -...

Debian DSA-3014-1 : squid3 - security update

Matthew Daley discovered that Squid3, a fully featured web proxy cache, did not properly perform input validation in request parsing. A remote attacker could use this flaw to mount a denial of service by sending crafted Range requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Ubuntu: Security Advisory (USN-2327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3014-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3014-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3014-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3014-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 28, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3014-1 (squid3 - security update)

Matthew Daley discovered that Squid3, a fully featured web proxy cache, did not properly perform input validation in request parsing. A remote attacker could use this flaw to mount a denial of service by sending crafted Range requests. OpenVAS Vulnerability Test $Id: deb3014.nasl 6724 2017-07-14...

DSA-3014-1 squid3 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3014-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : squid3 (openSUSE-SU-2012:0213-1)

This update fixes the following security issue : - 727492: Invalid free by processing CNAME CVE-2011-4096 This update also fixes the following non-security issue : - 737905: installation creates empty spurious file '/1' %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : squid3 (openSUSE-SU-2013:1441-1)

This squid3 update includes several security fixes and minor changes. - squid-3.1.x-bnc829084-CVE-2013-4115-BOrequesthandling. diff Squid advisory SQUID-20132, CVE-2013-4115, bnc829084 Specially crafted http requests can trigger a buffer overflow when squid attempts to resolve an overly long...

openSUSE Security Update : squid3 (openSUSE-SU-2011:1018-1)

This update of squid3 fixes a buffer overflow vulnerability in the Gopher reply parser code CVE-2011-3205. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid3-5094. The text description of...

openSUSE Security Update : squid3 (openSUSE-SU-2010:0727-1)

A remote trusted client can cause a NULL pointer dereference within squid to make it crash. CVE-2010-3072: CVSS v2 Base Score: 5.0 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid3-3328...

openSUSE Security Update : squid3 (openSUSE-SU-2011:1018-1)

This update of squid3 fixes a buffer overflow vulnerability in the Gopher reply parser code CVE-2011-3205. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid3-5094. The text description of...

openSUSE Security Update : squid3 (openSUSE-SU-2013:0162-1)

update to 3.1.23 fix for bnc794954, CVE-2012-5643, SQUID:2012-1 - Additional fixes for CVE-2012-5643 / SQUID:2012-1 - http://www.squid-cache.org/Advisories/SQUID-20121.txt - https://vulners.com/cve/CVE-2012-5643 - removed 3.1.12 config, nobuilddates, swapdir patch - added FSF, config,...

SuSE 11.3 Security Update : squid3 (SAT Patch Number 9138)

A remote DoS attack in the Squid web proxy has been fixed. Due to incorrect state management, Squid was vulnerable to a denial of service attack when processing certain HTTPS requests. CVE-2014-0128 For more information see http://www.squid-cache.org/Advisories/SQUID-20141.txt . Additionally, a b...

SuSE 11.2 Security Update : squid3 (SAT Patch Number 7336)

A denial of service problem in Squid3 initiated via invalid Content-Length headers and memory leaks has been fixed. CVE-2012-5643 / CVE-2013-0189, SQUID-2012:1 Also a logrotate permission issue has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-2631-1 : squid3 - denial of service

Squid3, a fully featured Web proxy cache, is prone to a denial of service attack due to memory consumption caused by memory leaks in cachemgr.cgi : - CVE-2012-5643 squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of servi...

[SECURITY] [DSA 2631-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2630-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 24, 2013 http://www.debian.org/security/faq -...