Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 112

Export CSV
CVE-2024-25111

SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunked, encoded HTTP Message. This bug is fixed in Squid version 6.8. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. There is no workaround for this issue.

CVSS 3.1 · 8.6 High EPSS 65.3% KEV · Not listed
Vendors
Fedoraproject Netapp Redhat and 1 more
Products
Fedora Bluexp Enterprise Linux and 5 more
CVE-2023-46728

SQUID-2021:8 Denial of Service in Gopher gateway

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Rhel Aus Rhel E4s and 3 more
CVE-2025-59362

squid-cache: Squid cache buffer overflow

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Squid-cache
Products
Squid
CVE-2024-25617

Denial of Service in HTTP Header parser in squid proxy

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Service when sending oversized headers in HTTP messages. In versions of Squid prior to 6.5 this can be achieved if the request_header_max_size or reply_header_max_size settings are unchanged from the default. In Squid version 6.5 and later, the default setting of these parameters is safe. Squid will emit a critical warning in cache.log if the administrator is setting these parameters to unsafe values. Squid will not at this time prevent these settings from being changed to unsafe values. Users are advised to upgrade to version 6.5. There are no known workarounds for this vulnerability. This issue is also tracked as SQUID-2024:2

CVSS 3.1 · 5.3 Medium EPSS 88.1% KEV · Not listed
Vendors
Netapp Redhat Squid-cache
Products
Bluexp Enterprise Linux Rhel Aus and 4 more
CVE-2023-50269

SQUID-2023:10 Denial of Service in HTTP Request parsing

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.

CVSS 3.1 · 8.6 High EPSS 57.6% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Rhel Aus Rhel E4s and 3 more
CVE-2016-10003

squid: Information disclosure in Collapsed forwarding

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

CVSS 3.1 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Squid-cache
Products
Squid
CVE-2016-10002

squid: Information disclosure in HTTP request processing

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.

CVSS 3.0 · 7.5 High EPSS 7.0% KEV · Not listed
Vendors
Debian Redhat Squid-cache
Products
Debian Linux Enterprise Linux Squid
CVE-2022-41318

squid: buffer-over-read in SSPI and SMB authentication

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

CVSS 3.1 · 8.6 High EPSS 3.1% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Rhel E4s Rhel Eus and 1 more
CVE-2022-41317

squid: exposure of sensitive information in cache manager

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Squid-cache
Products
Squid
CVE-2016-2571

squid: wrong error handling for malformed HTTP responses

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

CVSS 3.0 · 7.5 High EPSS 9.3% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Squid
CVE-2016-2570

squid: some code paths fail to check bounds in string object

The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.

CVSS 3.0 · 7.5 High EPSS 9.0% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Squid
CVE-2016-2569

squid: some code paths fail to check bounds in string object

Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.

CVSS 3.0 · 7.5 High EPSS 31.2% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Squid
CVE-2016-2390

squid: incorrect server error handling resulting in denial of service

The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message.

CVSS 3.0 · 5.9 Medium EPSS 25.6% KEV · Not listed
Vendors
Squid-cache
Products
Squid
CVE-2015-5400

squid: information disclosure due to incorrect handling of peer responses in tunnel.cc (SQUID-2015:2)

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

CVSS 2.0 · 6.8 Medium EPSS 20.8% KEV · Not listed
Vendors
Debian Fedoraproject Squid-cache
Products
Debian Linux Fedora Squid
CVE-2015-3455

squid: incorrect X509 server certificate validation (SQUID-2015:1)

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.

CVSS 2.0 · 2.6 Low EPSS 11.4% KEV · Not listed
Vendors
Fedoraproject Oracle Redhat and 1 more
Products
Fedora Linux Solaris and 2 more
CVE-2015-0881

squid: CRLF injection flaw permitting HTTP response splitting attacks

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.

CVSS 2.0 · 4.3 Medium EPSS 4.5% KEV · Not listed
Vendors
Squid-cache
Products
Squid
CVE-2014-9749

squid: Nonce replay vulnerability in Digest authentication

Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."

CVSS 2.0 · 4.0 Medium EPSS 11.4% KEV · Not listed
Vendors
Opensuse Squid-cache
Products
Opensuse Squid
CVE-2014-7142

squid: pinger incorrect input validation flaw in handling of ICMP replies (SQUID-2014:4)

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.

CVSS 2.0 · 6.4 Medium EPSS 24.9% KEV · Not listed
Vendors
Canonical Oracle Squid-cache
Products
Ubuntu Linux Solaris Squid
CVE-2016-4554

squid: Header Smuggling issue in HTTP Request processing

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.

CVSS 3.0 · 8.6 High EPSS 38.9% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2014-7141

squid: pinger OOB array index flaw in handling of ICMP replies (SQUID-2014:4)

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.

CVSS 2.0 · 6.4 Medium EPSS 76.1% KEV · Not listed
Vendors
Squid-cache
Products
Squid