SQ
Product
squid
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 49Medium 30Low 1
Watch
Add squid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-5643 | – | Dec 20 | Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +34 more |
| CVE-2012-2213 | – | Apr 28 | Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header Affected: 3.1.9 |
| CVE-2011-4096 | – | Nov 17 | The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply… Affected: through 3.1.15; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2011-3205 | – | Sep 6 | Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote… Affected: 3.0.stable1; 3.0.stable2; 3.0.stable3; 3.0.stable4; 3.0.stable5; 3.0.stable6; +34 more |
| CVE-2010-2951 | – | Oct 12 | dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial… Affected: 3.1.6 |
| CVE-2010-3072 | – | Sep 20 | The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 3.0; 3.0.stable1; 3.0.stable2; 3.0.stable3; 3.0.stable4; 3.0.stable5; +34 more |
| CVE-2010-0639 | – | Feb 15 | The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +27 more |
| CVE-2010-0308 | – | Feb 3 | lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +34 more |
| CVE-2009-2855 | – | Aug 18 | The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that… Affected: 2.7; 2.7; 2.7 |
| CVE-2009-2622 | – | Jul 28 | Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol… Affected: 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +23 more |
| CVE-2009-2621 | – | Jul 28 | Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of… Affected: 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +23 more |
| CVE-2005-0211 | – | May 2 | Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is… Affected: 2.5.stable1; 2.5.stable2; 2.5.stable3; 2.5.stable4; 2.5.stable5; 2.5.stable6 |