Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2007-6239

squid: DoS in cache updates

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

CVSS 2.0 · 5.0 Medium EPSS 26.7% KEV · Not listed
Vendors
Redhat Squid
Products
Enterprise Linux Squid Web Proxy Cache
CVE-2009-0801

squid: remote bypass of access controls

Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

CVSS 2.0 · 5.4 Medium EPSS 3.1% KEV · Not listed
Vendors
Squid
Products
Squid Web Proxy Cache