6195 matches found
SUSE-SU-2018:3786-1 Security update for squid
This update for squid fixes the following issues: Security issues fixed: - CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. - CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: - Create runtime...
SUSE SLES12 Security Update : squid (SUSE-SU-2018:3771-1)
This update for squid fixes the following issues : Security issues fixed : CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: Create runtime...
Squid Memory Leak Vulnerability
Squid is a caching and forwarding HTTP web proxy. A memory leak vulnerability exists in Squid prior to 4.4 when SNMP is enabled, which can be exploited by an attacker to cause a denial of service via SNMP packets...
Squid Cross-Site Scripting Vulnerability
Squid is a caching and forwarding HTTP web proxy. A cross-site scripting vulnerability exists in Squid prior to 4.4, which can be exploited by an attacker via a specially crafted X.509 certificate during HTTPS error page generation with a certificate error...
CVE-2018-19131
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...
CVE-2018-19131
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...
CVE-2018-19132
Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...
DEBIAN-CVE-2018-19132
Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...
DEBIAN-CVE-2018-19131
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...
CVE-2018-19132
Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...
Design/Logic Flaw
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...
CVE-2018-19131
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...
Memory corruption
Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...
CVE-2018-19132
CVE-2018-19132 : In Squid, a memory leak occurs when SNMP is enabled, exploitable via SNMP packets to cause denial of service by resource exhaustion. Public advisories confirm a fix in newer Squid releases across multiple distros (e.g., Debian squid3 updates, Mageia 2018-0458, Amazon ALAS/SR pack...
CVE-2018-19131
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...
CVE-2018-19132
Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...
CVE-2018-19131
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...
CVE-2018-19132
Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...
CVE-2018-19131
CVE-2018-19131 affects Squid prior to 4.4, enabling cross-site scripting via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors. Connected advisories confirm the issue and provide fixes: Amazon Linux 2 ALAS2-2023-2310 lists updated squid packages (e.g., squid-...