6194 matches found
Important Photon OS Security Update - PHSA-2023-4.0-0520
Updates of 'squid', 'vim' packages of Photon OS have been released...
Denial Of Service (DoS)
libsquid.so is vulnerable to Denial of Service DoS. The vulnerability occurs when an attacker sends a specially crafted HTTP Digest authentication request to a vulnerable Squid server. The request can cause the server to consume excessive CPU resources, leading to a DoS condition...
AlmaLinux 9 : squid (ALSA-2023:7465)
The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:7465 advisory. - Squid is vulnerable to Denial of Service attack against HTTP and HTTPS clients due to an Improper Handling of Structural Elements bug. CVE-2023-5824 Note that...
Important: Red Hat Security Advisory: squid security update
An update for squid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
squid: Use-After-Free in the HTTP Collapsed Forwarding Feature
A flaw was found in Squid. The use of the HTTP Collapsed Forwarding configuration may allow an attacker to perform a denial of service remotely...
squid: DoS against HTTP and HTTPS
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...
squid-cache: Squid Buffer Overflow
A heap-based buffer overflow flaw was found in the Squid caching proxy. When processing the Uniform Resource Name URNs, specific conditions can lead to remote code execution...
PT-2025-31674
Name of the Vulnerable Software and Affected Versions Squid versions 6.3 and earlier Squid versions prior to 6.4 Squid versions 5.7-2+deb12u3 Debian bookworm Description Squid, a high-performance proxy caching server, is affected by multiple issues. A critical heap-based buffer overflow exists in...
The vulnerability of Squid’s chunked decoder allows a hacker to interact directly with the server.
The vulnerability of Squid’s chunked proxy server decoder is related to the way the server interprets fragmented encoding syntax. Exploiting this vulnerability allows a remote attacker to interact directly with the server...
The vulnerability of the Squid proxy server is related to improper conversion between numerical types and uncontrolled resource consumption, allowing attackers to cause service failures.
The vulnerability of the Squid proxy server is related to the issue of sending FTP URL addresses in HTTP requests, or creating FTP URL addresses from input data of the FTP Native. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Ubuntu: Security Advisory (USN-6500-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ALSA-2023:7465 Important: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: DoS against HTTP and HTTPS CVE-2023-5824 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
PT-2023-7926 · Squid +7 · Squid +8
Name of the Vulnerable Software and Affected Versions: Squid versions 3.5 through 5.9 Description: Squid is a caching proxy for the Web that supports HTTP, HTTPS, FTP, and more. The affected versions of Squid are subject to a Use-After-Free bug, which can lead to a Denial of Service attack via...
The vulnerability of the Squid proxy server is related to improper handling of exclusive conditions and uncontrolled resource consumption, allowing attackers to cause service failures.
The vulnerability of the Squid proxy server is related to the limitations applied to the checking of HTTP response headers before caching. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
RHEL 9 : squid (RHSA-2023:7465)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7465 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: DoS...
squid:4 security update
libecap squid 7:4.15-7.1 - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1 and ICAP...
Oracle Linux 8 : squid:4 (ELSA-2023-7213)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7213 advisory. libecap squid 7:4.15-7.1 - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14776 - squid: squid:...
Important: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: DoS against HTTP and HTTPS CVE-2023-5824 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...