RHEL 7 : squid (RHSA-2021:1135)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1135 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: improper inpu...

[SECURITY] Fedora 34 Update: squid-4.14-1.fc34

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

The vulnerability in the uri_whitespace configuration implementation of the Squid proxy server allows a hacker to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the uriwhitespace configuration in the Squid proxy server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely. This constitutes an HTTP Request Smuggling attack...

Fedora: Security Advisory for squid (FEDORA-2021-ecb24e0b9d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for squid (FEDORA-2021-ecb24e0b9d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the software package that implements the Squid caching proxy server’s function relates to incorrect elimination of certain elements in the output data. This allows a hacker to compromise the integrity of the data.

The vulnerability of the software package that implements the Squid caching proxy server lies in the improper elimination of certain elements in the output data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data...

The vulnerability of Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for verifying the size of copied data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity...

The vulnerability of the HTTP daisy authentication mechanism of the Squid proxy server, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the HTTP dijgest-authentication mechanism of the Squid proxy server is related to the exposure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism, related to integer overflow of the value, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Squid vulnerabilities (USN-4895-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4895-1 advisory. Alex Rousskov and Amit Klein discovered that Squid incorrectly handled certain Content-Length headers. A remote attacker could...

Ubuntu: Security Advisory (USN-4895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Squid’s ESI element processing mechanism, which is related to the operation being brought within the allowable data buffer limits, allows a hacker to cause a service failure.

The vulnerability of the Squid proxy server’s ESI element processing mechanism lies in the ability to limit the execution of operations within acceptable data buffer limits. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of Squid’s request headers, related to HTTP request processing flaws, allows attackers to compromise data integrity.

The vulnerability of Squid proxy server requests is related to a lack of proper interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the ESIExpression::Evaluate function in the Squid proxy server lies in the fact that it allows the output of operations within acceptable data buffer limits. This enables attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ESIExpression::Evaluate function of the Squid proxy server is related to the execution of operations within acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...

USN-4895-1: Squid vulnerabilities

Alex Rousskov and Amit Klein discovered that Squid incorrectly handled certain Content-Length headers. A remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. This issue only affected Ubuntu 20.04 LTS. CVE-2020-15049 Jianjun Chen...

Friday Squid Blogging: Squid Potato Masher

A squid potato masher for only $11.50. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Debian DSA-4873-1 : squid - security update

Jianjun Chen discovered that the Squid proxy caching server was susceptible to HTTP request smuggling. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4873. The text itself is copyright C Software in the Publ...

Squid 2.x < 4.14 / 5.x < 5.0.5 (SQUID-2020:11)

According to its banner, the version of Squid running on the remote host is 2.x prior to 4.14 or 5.x prior to 5.0.5. It is, therefore, affected by an HTTP request smuggling vulnerability due to improper input validation. This occurs for certain uriwhitespace in configuration settings. This proble...

Debian: Security Advisory (DSA-4873-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4873-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4873-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 23, 2021 https://www.debian.org/security/faq -...