Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-47729

Опубликовано: 18 июл. 2026
Источник: msrc
CVSS3: 6.5
EPSS Низкий

Описание

Squid: Memory disclosure in FTP gateway

EPSS

Процентиль: 74%
0.01503
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
4 месяца назад

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.

CVSS3: 6.5
redhat
5 месяцев назад

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.

CVSS3: 6.5
nvd
4 месяца назад

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.

CVSS3: 6.5
debian
4 месяца назад

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper ...

CVSS3: 6.5
fstec
7 месяцев назад

Уязвимость функции strchr() прокси-сервера Squid, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 74%
0.01503
Низкий

6.5 Medium

CVSS3