Squid-cache - vulnerabilities (CVEs)

112 CVEs in 1 products, 1 in the last 30 days, newest from 2026-10-13.

Products

Squid - 111 CVEs

Newest CVEs of Squid-cache

CVE-2026-61642 - CVSS 7.7 (high), 2026-10-13: Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request…
CVE-2026-47729 - CVSS 6.5 (medium), 2026-07-16: Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway…
CVE-2026-50012 - CVSS 5.5 (medium), 2026-07-16: Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in…
CVE-2026-33526 - CVSS 9.2 (critical), 2026-03-26: Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic.…
CVE-2026-33515 - CVSS 6.9 (medium), 2026-03-26: Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP…
CVE-2026-32748 - CVSS 8.7 (high), 2026-03-26: Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid…
CVE-2025-62168 - CVSS 10 (critical), 2025-10-17: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information…
CVE-2025-59362 - CVSS 4 (medium), 2025-09-26: Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVE-2025-54574 - CVSS 9.8 (critical), 2025-08-01: Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when…
CVE-2024-45802 - CVSS 7.5 (high), 2024-10-28: Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During…
CVE-2024-37894 - CVSS 6.3 (medium), 2024-06-25: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is…
CVE-2024-25111 - CVSS 8.6 (high), 2024-03-06: Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked…
CVE-2024-25617 - CVSS 7.5 (high), 2024-02-14: Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be…
CVE-2024-23638 - CVSS 6.5 (medium), 2024-01-24: Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against…
CVE-2023-50269 - CVSS 8.6 (high), 2023-12-14: Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1…
CVE-2023-49285 - CVSS 8.6 (high), 2023-12-04: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack…
CVE-2023-49288 - CVSS 8.6 (high), 2023-12-04: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to…
CVE-2023-49286 - CVSS 8.6 (high), 2023-12-04: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a…
CVE-2023-46728 - CVSS 7.5 (high), 2023-11-06: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service…
CVE-2023-46847 - CVSS 8.6 (high), 2023-11-03: Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory…
CVE-2023-5824 - CVSS 7.5 (high), 2023-11-03: A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP…
CVE-2023-46848 - CVSS 8.6 (high), 2023-11-03: Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs…
CVE-2023-46846 - CVSS 9.3 (critical), 2023-11-03: SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past…
CVE-2023-46724 - CVSS 8.6 (high), 2023-11-01: Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled…
CVE-2022-41318 - CVSS 8.6 (high), 2022-12-25: A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication…
CVE-2022-41317 - CVSS 6.5 (medium), 2022-12-25: An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive…
CVE-2021-46784 - CVSS 6.5 (medium), 2022-07-17: In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long…
CVE-2021-41611 - CVSS 7.5 (high), 2021-10-18: An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain…
CVE-2021-31807 - CVSS 6.5 (medium), 2021-06-08: An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when…
CVE-2021-33620 - CVSS 6.5 (medium), 2021-05-28: Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The…