SQ
Product
squid
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 49Medium 30Low 1
Watch
Add squid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54574 | 9.8 | Aug 1 | Squid is a caching proxy for the Web Affected: before 6.4 |
| CVE-2020-11945 | 9.8 | Apr 23 | An issue was discovered in Squid before 5.0.2 Affected: 3.0 through 3.5.28; 4.0 before 4.11; 5.0 before 5.0.2 |
| CVE-2019-12519 | 9.8 | Apr 15 | An issue was discovered in Squid through 4.7 Affected: 3.0 through 3.5.28; 4.0 through 4.10; 5.0 through 5.0.1 |
| CVE-2019-12524 | 9.8 | Apr 15 | An issue was discovered in Squid through 4.7 Affected: through 4.7 |
| CVE-2019-12526 | 9.8 | Nov 26 | An issue was discovered in Squid before 4.9 Affected: 3.0 through 3.5.28; 4.0 through 4.8 |
| CVE-2019-12525 | 9.8 | Jul 11 | An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7 Affected: 3.3.9 through 3.5.28; 4.0 through 4.7 |
| CVE-2019-12523 | 9.1 | Nov 26 | An issue was discovered in Squid before 4.9 Affected: 3.0 through 3.5.28; 4.0 through 4.8 |
| CVE-2020-15049 | 8.8 | Jun 30 | An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3 Affected: 2.0 through 2.6; 3.1 through 3.5.28; 4.0 before 4.12; 5.0 before 5.0.3; 2.7; 2.7; +7 more |
| CVE-2019-12527 | 8.8 | Jul 11 | An issue was discovered in Squid 4.0.23 through 4.7 Affected: 4.0.23 through 4.7 |
| CVE-2016-4051 | 8.8 | Apr 25 | Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +34 more |
| CVE-2022-41318 | 8.6 | Dec 25 | A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6 Affected: 2.5 before 5.7 |
| CVE-2020-25097 | 8.6 | Mar 19 | An issue was discovered in Squid through 4.13 and 5.x through 5.0.4 Affected: 2.0 before 4.14; 5.0.1 before 5.0.5 |
| CVE-2016-4554 | 8.6 | May 10 | mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host… Affected: through 3.5.17 |
| CVE-2016-4553 | 8.6 | May 10 | client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct… Affected: through 3.5.17; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more |
| CVE-2016-3947 | 8.2 | Apr 7 | Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial… Affected: through 3.5.15; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +2 more |
| CVE-2016-4054 | 8.1 | Apr 25 | Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |
| CVE-2016-4052 | 8.1 | Apr 25 | Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted… Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |
| CVE-2026-61642 | 7.7 | Oct 13 | Squid Request Smuggling in HTTP Transfer-Encoding Affected: >= 3.3.0.1, < 7.6 |
| CVE-2026-33526 | 7.5 | Mar 26 | Squid vulnerable to Denial of Service in ICP Request handling Affected: < 7.5 |
| CVE-2026-32748 | 7.5 | Mar 26 | Squid has Denial of Service in ICP Response handling Affected: < 7.5 |
| CVE-2025-62168 | 7.5 | Oct 17 | Squid is a caching proxy for the Web Affected: before 7.2 |
| CVE-2024-45802 | 7.5 | Oct 28 | Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: 3.0 before 6.10 |
| CVE-2024-25111 | 7.5 | Mar 6 | Squid is a web proxy cache Affected: 3.5.27 before 6.8 |
| CVE-2024-25617 | 7.5 | Feb 14 | Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: 3.0 before 6.5 |
| CVE-2023-50269 | 7.5 | Dec 14 | Squid is a caching proxy for the Web Affected: 3.1 through 5.9; 6.0.1 through 6.5; 2.6; 2.7; 2.7; 2.7; +7 more |
| CVE-2023-49288 | 7.5 | Dec 4 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: 3.5 through 5.9 |
| CVE-2023-49286 | 7.5 | Dec 4 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: through 6.4 |
| CVE-2023-49285 | 7.5 | Dec 4 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: through 6.4 |
| CVE-2023-46728 | 7.5 | Nov 6 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: before 6.0.1 |
| CVE-2023-5824 | 7.5 | Nov 3 | A flaw was found in Squid Affected: before 6.4 |
| CVE-2023-46848 | 7.5 | Nov 3 | Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native… Affected: 5.0.3 before 6.4 |
| CVE-2023-46847 | 7.5 | Nov 3 | Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is… Affected: 3.2.0.1 before 6.4 |
| CVE-2023-46724 | 7.5 | Nov 1 | Squid is a caching proxy for the Web Affected: 3.3.0.1 before 6.4 |
| CVE-2021-41611 | 7.5 | Oct 18 | An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2 Affected: 5.0.6 before 5.2 |
| CVE-2021-28651 | 7.5 | May 27 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6 Affected: 2.0 before 4.15; 5.0 before 5.0.6 |
| CVE-2020-24606 | 7.5 | Aug 24 | Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response… Affected: 3.0 before 4.13; 5.0.1 before 5.0.4 |
| CVE-2020-14058 | 7.5 | Jun 30 | An issue was discovered in Squid before 4.12 and 5.x before 5.0.3 Affected: 3.1 through 3.5.28; 4.0 before 4.12; 5.0 before 5.0.3 |
| CVE-2019-12520 | 7.5 | Apr 15 | An issue was discovered in Squid through 4.7 and 5 Affected: through 4.7 |
| CVE-2019-12528 | 7.5 | Feb 4 | An issue was discovered in Squid before 4.10 Affected: before 4.10 |
| CVE-2020-8517 | 7.5 | Feb 4 | An issue was discovered in Squid before 4.10 Affected: before 4.10 |
| CVE-2020-8449 | 7.5 | Feb 4 | An issue was discovered in Squid before 4.10 Affected: before 4.10 |
| CVE-2019-18679 | 7.5 | Nov 26 | An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8 Affected: 2.0 through 2.7; 3.0 through 3.5.28; 4.0 through 4.8; 2.7; 2.7; 2.7; +5 more |
| CVE-2019-18676 | 7.5 | Nov 26 | An issue was discovered in Squid 3.x and 4.x through 4.8 Affected: 3.0 through 3.5.28; 4.0 through 4.8 |
| CVE-2019-12854 | 7.5 | Aug 15 | Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory Affected: 4.0 through 4.7 |
| CVE-2018-1000027 | 7.5 | Feb 9 | The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header… Affected: before 4.0.23 |
| CVE-2018-1000024 | 7.5 | Feb 9 | The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can… Affected: 3.0 through 3.5.27; 4.0 through 4.0.22 |
| CVE-2016-10003 | 7.5 | Jan 27 | Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some… Affected: 3.5.0.1 before 3.5.23; 4.0.1 before 4.0.17 |
| CVE-2016-10002 | 7.5 | Jan 27 | Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads… Affected: 3.1.10; 3.1.11; 3.1.12; 3.1.14; 3.1.15; 3.1.16; +34 more |
| CVE-2016-4556 | 7.5 | May 10 | Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes… Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |
| CVE-2016-4555 | 7.5 | May 10 | client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |