Squid@3.0.stable15 Security Vulnerabilities and Issues — Squid@3.0.stable15 CVE List

Lucene search

Squid-cacheSquid3.0.stable15

11 matches found

CVE•added 2011/09/06 3:55 p.m.•159 views

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impac...

6.8CVSS9.1AI score0.7604EPSS

CVE•added 2011/11/17 7:55 p.m.•141 views

CVE-2011-4096

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

5CVSS8.1AI score0.6249EPSS

CVE•added 2012/12/20 12:2 p.m.•100 views

CVE-2012-5643

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authent...

5CVSS8.3AI score0.39326EPSS

CVE•added 2014/09/12 2:55 p.m.•97 views

CVE-2014-6270

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

6.8CVSS8.4AI score0.19915EPSS

CVE•added 2016/02/27 5:59 a.m.•90 views

CVE-2016-2571

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

7.5CVSS7.2AI score0.22992EPSS

CVE•added 2016/02/27 5:59 a.m.•86 views

CVE-2016-2569

Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.

7.5CVSS7.1AI score0.74153EPSS

CVE•added 2016/04/07 6:59 p.m.•85 views

CVE-2016-3948

Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.

7.5CVSS7.2AI score0.59748EPSS

CVE•added 2010/02/15 6:30 p.m.•72 views

CVE-2010-0639

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

5CVSS6.3AI score0.56162EPSS

CVE•added 2016/02/27 5:59 a.m.•71 views

CVE-2016-2570

The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/C...

7.5CVSS7.2AI score0.09233EPSS

CVE•added 2010/02/03 6:30 p.m.•67 views

CVE-2010-0308

lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.

4CVSS6.1AI score0.19076EPSS

CVE•added 2010/09/20 9:0 p.m.•49 views

CVE-2010-3072

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

5CVSS6.2AI score0.79499EPSS