squid:4 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Denial Of Service (DoS)

squid is vulnerable to denial of service DoS. The vulnerability exists through an improper parser validation, allowing a trusted client to cause memory leaks through the Cache Manager API...

Denial Of Service (DoS)

squid is vulnerable to denial of service. The vulnerability exists due to a buffer management bug which allows an attacker to cause an application crash...

Denial Of Service (DoS)

squid is vulnerable to denial of service. An attacker can cause a fatal error via the HTTP response of a squid cache, resulting in a denial of service condition...

Denial Of Service (DoS)

squid is vulnerable to denial of service DoS. The vulnerability exists through an improper input validation, affecting all clients using the proxy...

Denial Of Service (DoS)

squid is vulnerable to denial of service DoS. The vulnerability exists through an incorrect memory management bug that affects all clients using the proxy...

Denial Of Service (DoS)

squid is vulnerable to denial of service. The vulnerability exists due to an integer overflow due to insufficient validation of user-supplied input when delivering responses from HTTP Range requests...

Friday Squid Blogging: Far Side Squid Comic

A classic. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Squid 输入验证错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid suffers from an input validation error vulnerability. The vulnerability stems from an incorrect memory managemen...

Oracle Linux 8 : squid:4 (ELSA-2020-3623)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3623 advisory. - Resolves: 1872345 - CVE-2020-15811 squid:4/squid: HTTP Request Splitting could result in cache poisoning - Resolves: 1872330 - CVE-2020-15810...

Vulnerabilities fixed in Squid

Vulnerabilities have been fixed in Squid. The vulnerabilities allow a remote malicious person to perform attacks that lead to a denial-of-service. The developers of Squid categorize these vulnerabilities according to the CVSSv3 method with a highest score of 8.8. The developers of Squid have...

Squid 安全漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in Squid. The vulnerability stems from a memory leak caused by incorrect parser...

Squid 输入验证错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. An input validation error vulnerability exists in Squid. The vulnerability arises from insufficient validation of...

Squid 资源管理错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid is vulnerable to a resource management error. A remote attacker can trick a user behind a proxy server into...

PT-2021-3105 · Squid +8 · Squid +9

Name of the Vulnerable Software and Affected Versions: Squid versions prior to 4.15 Squid versions 5.x prior to 5.0.6 Description: The issue exists due to insufficient validation of user-input data when delivering responses to HTTP range requests. This can be exploited by a remote attacker to cau...

Squid 输入验证错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. An input validation error vulnerability exists in Squid. The vulnerability arises from insufficient validation of...

Squid 输入验证错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. An input validation error vulnerability exists in Squid. The vulnerability stems from insufficient input validation wh...

Friday Squid Blogging: COVID Relief Funds

A town in Japan built a giant squid statue with its COVID relief grant. One local told the Chunichi Shimbun newspaper that while the statue may be effective in the long run, the money could have been used for "urgent support," such as for medical staff and long-term care facilities. But a...

Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2021-1852)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Friday Squid Blogging: On Squid Coloration

Nice excerpt from Martin Wallins book Squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...