6194 matches found
Friday Squid Blogging: Human Cells with Squid-Like Transparency
I think we need more human organs with squid-like features. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Friday Squid Blogging: Shark vs. Squid
National Geographic has a photo of a 7-foot long shark that fought a giant squid and lived to tell the tale. Or, at least, lived to show off the suction marks on his skin. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blo...
The vulnerability of the Squid proxy server, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Squid proxy server arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to access features that can only be used by reverse proxies.
The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to gain access to features that can only be used by reverse proxies...
The vulnerability of the Squid proxy server, related to the lack of a authentication mechanism for url_regex, allows attackers to gain access to blocked resources.
The vulnerability of the Squid proxy server is related to the lack of authentication mechanism for urlregex. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to blocked resources...
The vulnerability of the Squid proxy server arises from insufficient validation of input data in the ext_lm_group_acl. This allows a hacker to terminate the Squid process and cause a service failure for all clients that use the proxy.
The vulnerability of the Squid proxy server exists due to insufficient validation of input data in extlmgroupacl. Exploiting this vulnerability could allow a malicious actor to terminate the Squid process remotely and cause service failures for all clients using the proxy...
The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to disclose protected information.
The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information by interpreting the created HTTP requests in an unexpected manner...
Amazon Linux AMI : squid (ALAS-2020-1378)
The version of squid installed on the remote host is prior to 3.5.20-15.39. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1378 advisory. An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls...
Important: squid
Issue Overview: An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function uses a fixed stack buffer to hold the expression while it's being evaluated. When processing the expression, it could either evaluat...
Friday Squid Blogging: Humboldt Squid Communication
Humboldt Squid communicate by changing their skin patterns and glowing. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
The vulnerability of the Proxy-Authentication component of the Squid proxy server allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the Proxy-Authentication component of the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
The vulnerability of the HttpHeader::getAuth function in the Squid proxy server allows a hacker to trigger a service denial or execute arbitrary code.
The vulnerability of the HttpHeader::getAuth function in the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...
The vulnerability in the cachemgr.cgi utility of the Squid proxy server allows a hacker to perform cross-site scripting attacks.
The vulnerability of the cachemgr.cgi utility of the Squid proxy server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks using the username or auth...
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1591)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : squid (EulerOS-SA-2020-1591)
According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to acce...
Friday Squid Blogging: Squid Can Edit Their Own Genomes
This is new news: Revealing yet another super-power in the skillful squid, scientists have discovered that squid massively edit their own genetic instructions not only within the nucleus of their neurons, but also within the axon -- the long, slender neural projections that transmit electrical...
CentOS: Security Advisory for squid (CESA-2020:2040)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CentOS 7 : squid (RHSA-2020:2040)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2040 advisory. - An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function...
squid security update
CentOS Errata and Security Advisory CESA-2020:2040 An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
