CVE-2019-12522

CVE-2019-12522 (Squid) affects Squid up to version 4.7. When Squid runs as root, its child processes are spawned as a lesser user (default: nobody). The code path uses leave_suid, which leaves the Saved UID as 0, enabling an attacker who compromises a child process to escalate privileges back to ...

CVE-2021-28652

CVE-2021-28652 concerns Squid before 4.15 and 5.x before 5.0.6. The issue stems from incorrect parser validation, allowing a Denial of Service attack against the Cache Manager API. A trusted client with Cache Manager API access can trigger memory leaks that, over time, lead to a DoS via an unspec...

CVE-2016-4053

CVE-2016-4053 in Squid allowed public information disclosure of the server stack layout when processing ESI responses. The issue is documented across multiple advisories (Debian, Red Hat/CentOS, Fedora, Amazon ALAS) with fixes in various branches: Debians fixed squid3 3.1.20-2.2+deb7u5; Jessie/St...

CVE-2025-59362

CVE-2025-59362 affects Squid up to version 7.1, due to mishandling of ASN.1 encoding of long SNMP OIDs in asn_build_objid (lib/snmplib/asn1.c). The issue is triggered by the ASN.1 encoding path and is described across multiple advisories/documentation in Connected documents. Impact according to t...

CVE-2015-0881

The CVE-2015-0881 entry concerns Squid (proxy/cache server) with a vulnerability in its HTTP response handling. The issue is a CRLF injection in Squid before 3.1.1 that lets a remote attacker craft headers in a response and perform HTTP response splitting. Affected version range is Squid 0.x/1.x/...

CVE-2010-0308

CVE-2010-0308 affects Squid legacy releases: lib/rfc1035.c in Squid 2.x, 3.0–3.0.STABLE22, and 3.1–3.1.0.15 is vulnerable to a remote denial-of-service via a crafted DNS packet containing only a header. The vulnerability is triggered by processing such DNS headers, causing an assertion failure in...

CVE-2014-9749

CVE-2014-9749 affects Squid 3.4.4–3.4.11 and 3.5.0.1–3.5.1. The issue is a nonce replay vulnerability in Digest authentication that lets remote authenticated users retain access by reusing a stale nonce. Public details across connected sources (SUSE/OpenVAS/Nessus references) confirm the affected...