SQ
Product
squid
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 49Medium 30Low 1
Watch
Add squid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-15049 | 8.8 | Jun 30 | An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3 Affected: 2.0 through 2.6; 3.1 through 3.5.28; 4.0 before 4.12; 5.0 before 5.0.3; 2.7; 2.7; +7 more |
| CVE-2019-12527 | 8.8 | Jul 11 | An issue was discovered in Squid 4.0.23 through 4.7 Affected: 4.0.23 through 4.7 |
| CVE-2016-4051 | 8.8 | Apr 25 | Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +34 more |
| CVE-2022-41318 | 8.6 | Dec 25 | A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6 Affected: 2.5 before 5.7 |
| CVE-2020-25097 | 8.6 | Mar 19 | An issue was discovered in Squid through 4.13 and 5.x through 5.0.4 Affected: 2.0 before 4.14; 5.0.1 before 5.0.5 |
| CVE-2016-4554 | 8.6 | May 10 | mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host… Affected: through 3.5.17 |
| CVE-2016-4553 | 8.6 | May 10 | client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct… Affected: through 3.5.17; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more |
| CVE-2016-3947 | 8.2 | Apr 7 | Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial… Affected: through 3.5.15; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +2 more |
| CVE-2016-4054 | 8.1 | Apr 25 | Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |
| CVE-2016-4052 | 8.1 | Apr 25 | Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted… Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |
| CVE-2026-61642 | 7.7 | Oct 13 | Squid Request Smuggling in HTTP Transfer-Encoding Affected: >= 3.3.0.1, < 7.6 |
| CVE-2026-33526 | 7.5 | Mar 26 | Squid vulnerable to Denial of Service in ICP Request handling Affected: < 7.5 |
| CVE-2026-32748 | 7.5 | Mar 26 | Squid has Denial of Service in ICP Response handling Affected: < 7.5 |
| CVE-2025-62168 | 7.5 | Oct 17 | Squid is a caching proxy for the Web Affected: before 7.2 |
| CVE-2024-45802 | 7.5 | Oct 28 | Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: 3.0 before 6.10 |
| CVE-2024-25111 | 7.5 | Mar 6 | Squid is a web proxy cache Affected: 3.5.27 before 6.8 |
| CVE-2024-25617 | 7.5 | Feb 14 | Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: 3.0 before 6.5 |
| CVE-2023-50269 | 7.5 | Dec 14 | Squid is a caching proxy for the Web Affected: 3.1 through 5.9; 6.0.1 through 6.5; 2.6; 2.7; 2.7; 2.7; +7 more |
| CVE-2023-49288 | 7.5 | Dec 4 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: 3.5 through 5.9 |
| CVE-2023-49286 | 7.5 | Dec 4 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: through 6.4 |
| CVE-2023-49285 | 7.5 | Dec 4 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: through 6.4 |
| CVE-2023-46728 | 7.5 | Nov 6 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more Affected: before 6.0.1 |
| CVE-2023-5824 | 7.5 | Nov 3 | A flaw was found in Squid Affected: before 6.4 |
| CVE-2023-46848 | 7.5 | Nov 3 | Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native… Affected: 5.0.3 before 6.4 |
| CVE-2023-46847 | 7.5 | Nov 3 | Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is… Affected: 3.2.0.1 before 6.4 |
| CVE-2023-46724 | 7.5 | Nov 1 | Squid is a caching proxy for the Web Affected: 3.3.0.1 before 6.4 |
| CVE-2021-41611 | 7.5 | Oct 18 | An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2 Affected: 5.0.6 before 5.2 |
| CVE-2021-28651 | 7.5 | May 27 | An issue was discovered in Squid before 4.15 and 5.x before 5.0.6 Affected: 2.0 before 4.15; 5.0 before 5.0.6 |
| CVE-2020-24606 | 7.5 | Aug 24 | Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response… Affected: 3.0 before 4.13; 5.0.1 before 5.0.4 |
| CVE-2020-14058 | 7.5 | Jun 30 | An issue was discovered in Squid before 4.12 and 5.x before 5.0.3 Affected: 3.1 through 3.5.28; 4.0 before 4.12; 5.0 before 5.0.3 |
| CVE-2019-12520 | 7.5 | Apr 15 | An issue was discovered in Squid through 4.7 and 5 Affected: through 4.7 |
| CVE-2019-12528 | 7.5 | Feb 4 | An issue was discovered in Squid before 4.10 Affected: before 4.10 |
| CVE-2020-8517 | 7.5 | Feb 4 | An issue was discovered in Squid before 4.10 Affected: before 4.10 |
| CVE-2020-8449 | 7.5 | Feb 4 | An issue was discovered in Squid before 4.10 Affected: before 4.10 |
| CVE-2019-18679 | 7.5 | Nov 26 | An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8 Affected: 2.0 through 2.7; 3.0 through 3.5.28; 4.0 through 4.8; 2.7; 2.7; 2.7; +5 more |
| CVE-2019-18676 | 7.5 | Nov 26 | An issue was discovered in Squid 3.x and 4.x through 4.8 Affected: 3.0 through 3.5.28; 4.0 through 4.8 |
| CVE-2019-12854 | 7.5 | Aug 15 | Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory Affected: 4.0 through 4.7 |
| CVE-2018-1000027 | 7.5 | Feb 9 | The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header… Affected: before 4.0.23 |
| CVE-2018-1000024 | 7.5 | Feb 9 | The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can… Affected: 3.0 through 3.5.27; 4.0 through 4.0.22 |
| CVE-2016-10003 | 7.5 | Jan 27 | Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some… Affected: 3.5.0.1 before 3.5.23; 4.0.1 before 4.0.17 |
| CVE-2016-10002 | 7.5 | Jan 27 | Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads… Affected: 3.1.10; 3.1.11; 3.1.12; 3.1.14; 3.1.15; 3.1.16; +34 more |
| CVE-2016-4556 | 7.5 | May 10 | Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes… Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |
| CVE-2016-4555 | 7.5 | May 10 | client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses Affected: 3.0; 3.1; 3.1.0.1; 3.1.0.2; 3.1.0.3; 3.1.0.4; +34 more |
| CVE-2016-3948 | 7.5 | Apr 7 | Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to… Affected: 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2016-2572 | 7.5 | Feb 27 | http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure… Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6 |
| CVE-2016-2571 | 7.5 | Feb 27 | http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a… Affected: 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2016-2570 | 7.5 | Feb 27 | The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a… Affected: 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2016-2569 | 7.5 | Feb 27 | Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and… Affected: 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2020-8450 | 7.3 | Feb 4 | An issue was discovered in Squid before 4.10 Affected: before 4.10 |
Showing 49