Поиск уязвимостей
Количество 33
Количество 33
openSUSE-SU-2026:22080-1
Security update for squid
SUSE-SU-2026:4621-1
Security update for squid
ALT-PU-2026-5637
ALT-PU-2026-5637: package `squid` update to version 7.5-alt1
SUSE-SU-2026:4909-1
Security update for squid
RLSA-2026:8317
Important: squid:4 security update
RLSA-2026:8119
Important: squid security update
RLSA-2026:6301
Important: squid security update
ELSA-2026-8880
ELSA-2026-8880: squid security update (IMPORTANT)
ELSA-2026-8317
ELSA-2026-8317: squid:4 security update (IMPORTANT)
ELSA-2026-8119
ELSA-2026-8119: squid security update (IMPORTANT)
ELSA-2026-6301
ELSA-2026-6301: squid security update (IMPORTANT)
ALT-PU-2026-11716
ALT-PU-2026-11716: package `squid` update to version 7.6-alt2
CVE-2026-32748
Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5.
CVE-2026-32748
Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5.
CVE-2026-32748
Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5.
CVE-2026-32748
Squid has Denial of Service in ICP Response handling
CVE-2026-32748
Squid is a caching proxy for the Web. Prior to version 7.5, due to pre ...
ROS-20260508-80-0017
Уязвимость squid
BDU:2026-07191
Уязвимость прокси-сервера Squid, связанная с неправильной блокировкой ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2026-33515
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2026:22080-1 Security update for squid | около 1 месяца назад | ||
| SUSE-SU-2026:4621-1 Security update for squid | 28 дней назад | ||
| ALT-PU-2026-5637 ALT-PU-2026-5637: package `squid` update to version 7.5-alt1 | CVSS3: 8.6 | 7 месяцев назад | |
| SUSE-SU-2026:4909-1 Security update for squid | 14 дней назад | ||
 | RLSA-2026:8317 Important: squid:4 security update | 7 месяцев назад | ||
| RLSA-2026:8119 Important: squid security update | 7 месяцев назад | ||
| RLSA-2026:6301 Important: squid security update | 7 месяцев назад | ||
| ELSA-2026-8880 ELSA-2026-8880: squid security update (IMPORTANT) | 6 месяцев назад | ||
| ELSA-2026-8317 ELSA-2026-8317: squid:4 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2026-8119 ELSA-2026-8119: squid security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2026-6301 ELSA-2026-6301: squid security update (IMPORTANT) | 7 месяцев назад | ||
| ALT-PU-2026-11716 ALT-PU-2026-11716: package `squid` update to version 7.6-alt2 | CVSS3: 10 | 3 месяца назад | |
 | CVE-2026-32748 Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5. | CVSS3: 7.5 | 9% Низкий | 8 месяцев назад |
 | CVE-2026-32748 Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5. | CVSS3: 7.5 | 9% Низкий | 8 месяцев назад |
 | CVE-2026-32748 Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5. | CVSS3: 7.5 | 9% Низкий | 8 месяцев назад |
 | CVE-2026-32748 Squid has Denial of Service in ICP Response handling | CVSS3: 7.5 | 9% Низкий | 8 месяцев назад |
| CVE-2026-32748 Squid is a caching proxy for the Web. Prior to version 7.5, due to pre ... | CVSS3: 7.5 | 9% Низкий | 8 месяцев назад |
 | ROS-20260508-80-0017 Уязвимость squid | CVSS3: 8.6 | 9% Низкий | 6 месяцев назад |
 | BDU:2026-07191 Уязвимость прокси-сервера Squid, связанная с неправильной блокировкой ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 9% Низкий | 8 месяцев назад |
| CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch. | CVSS3: 6.5 | 1% Низкий | 8 месяцев назад |
Уязвимостей на страницу