Lucene search
+L

6194 matches found

CNNVD
CNNVD
added 2024/03/06 12:00 a.m.7 views

Squid 安全漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A denial of service vulnerability exists in Squid that stems from the presence of a recursion error, which can be...

8.6CVSS6.6AI score0.65254EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.18 views

squid: NULL pointer dereference in the gopher protocol code

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid. This issue may lead to a remote denial ...

7.5CVSS5.8AI score0.05955EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.16 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.05186EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.10 views

squid: denial of service in HTTP request parsing

A flaw was found in Squid, which is susceptible to a Denial of Service DoS due to an Uncontrolled Recursion bug, specifically targeting HTTP Request parsing. Exploiting this issue involves a remote client initiating a DoS attack by sending an oversized X-Forwarded-For header when the...

8.6CVSS5.8AI score0.57627EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.11 views

squid: Buffer over-read in the HTTP Message processing feature

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service...

8.6CVSS5.9AI score0.88144EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.10 views

squid-cache: Squid Buffer Overflow

A heap-based buffer overflow flaw was found in the Squid caching proxy. When processing the Uniform Resource Name URNs, specific conditions can lead to remote code execution...

9.8CVSS6.3AI score0.22918EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.27 views

squid: Denial of Service in SSL Certificate validation

A flaw was found in Squid. Due to an improper validation of the specified index bug, Squid compiled using --with-openssl is vulnerable to a denial of service attack against SSL Certificate validation. This flaw allows a remote server to perform a denial of service against the Squid Proxy by...

8.6CVSS5.8AI score0.04046EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.13 views

squid: Incorrect Check of Function Return Value In Helper Process management

A flaw was found in Squid due to an incorrect check of the return value in the helper process management. This issue may allow attackers to perform remote denial of service...

8.6CVSS5.8AI score0.10352EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/03/05 6:04 p.m.46 views

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.4AI score0.88144EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2024/03/05 8:20 a.m.45 views

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.6CVSS7.2AI score0.57627EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/03/05 8:20 a.m.33 views

squid: denial of service in HTTP request parsing

A flaw was found in Squid, which is susceptible to a Denial of Service DoS due to an Uncontrolled Recursion bug, specifically targeting HTTP Request parsing. Exploiting this issue involves a remote client initiating a DoS attack by sending an oversized X-Forwarded-For header when the...

8.6CVSS5.8AI score0.57627EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:00 a.m.36 views

RHEL 9 : squid (RHSA-2024:1153)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1153 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: DoS against...

9.8CVSS8.1AI score0.88144EPSS
SaveExploits1References15
OpenVAS
OpenVAS
added 2024/03/05 12:00 a.m.30 views

CentOS: Security Advisory for squid (CESA-2023:6805)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.6AI score0.88351EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:00 a.m.32 views

RHEL 8 : squid:4 (RHSA-2024:1066)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1066 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: denial of service in...

7.5CVSS6.8AI score0.88864EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:00 a.m.41 views

RHEL 9 : squid (RHSA-2024:1085)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1085 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: denial of...

8.6CVSS7.7AI score0.57627EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/03/04 9:16 a.m.9 views

squid: denial of service in HTTP header parser

A flaw was found in Squid. This issue may allow a remote client or remote server to trigger a denial of service when sending oversized headers in HTTP messages...

7.5CVSS5.8AI score0.88864EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.32 views

openSUSE: Security Advisory for squid (SUSE-SU-2023:4380-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.5AI score0.88351EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.43 views

openSUSE: Security Advisory for squid (SUSE-SU-2023:4698-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.3AI score0.88144EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.29 views

openSUSE: Security Advisory for squid (SUSE-SU-2023:4544-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.3AI score0.05955EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
added 2024/03/01 10:05 p.m.13 views

Friday Squid Blogging: New Extinct Species of Vampire Squid Discovered

Paleontologists have discovered a 183-million-year-old species of vampire squid. Prior research suggests that the vampyromorph lived in the shallows off an island that once existed in what is now the heart of the European mainland. The research team believes that the remarkable degree of...

7.2AI score
SaveExploits0
Rows per page
Query Builder