Поиск уязвимостей
Количество 38
Количество 38
CVE-2022-41317
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.
CVE-2022-41317
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.
CVE-2022-41317
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.
CVE-2022-41317
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5. ...
SUSE-SU-2022:2392-1
Security update for squid
CVE-2022-41318
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.
CVE-2022-41318
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.
CVE-2022-41318
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.
CVE-2022-41318
A buffer over-read was discovered in libntlmauth in Squid 2.5 through ...
BDU:2023-00066
Уязвимость кэширующего прокси-сервера Squid, связанная с неправильным контролем доступа, позволяющая нарушителю получить доступ к конфиденциальной информации
RLSA-2022:6839
Important: squid security update
RLSA-2022:6775
Important: squid:4 security update
ELSA-2022-6839
ELSA-2022-6839: squid security update (IMPORTANT)
ELSA-2022-6815
ELSA-2022-6815: squid security update (IMPORTANT)
ELSA-2022-6775
ELSA-2022-6775: squid:4 security update (IMPORTANT)
BDU:2023-01309
Уязвимость интерфейса Security Support Provider Interface (SSPI) и реализации сетевого протокола Server Message Block (SMB) прокси-сервера Squid, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании
ROS-20230112-01
Уязвимость SQUID
ROS-20230317-02
Уязвимость Squid
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-41317 An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7. | CVSS3: 6.5 | 2% Низкий | почти 4 года назад |
 | CVE-2022-41317 An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7. | CVSS3: 6.5 | 2% Низкий | около 4 лет назад |
 | CVE-2022-41317 An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7. | CVSS3: 6.5 | 2% Низкий | почти 4 года назад |
| CVE-2022-41317 An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5. ... | CVSS3: 6.5 | 2% Низкий | почти 4 года назад |
 | SUSE-SU-2022:2392-1 Security update for squid | больше 4 лет назад | ||
| CVE-2022-41318 A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7. | CVSS3: 8.6 | 3% Низкий | почти 4 года назад |
| CVE-2022-41318 A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7. | CVSS3: 8.6 | 3% Низкий | около 4 лет назад |
| CVE-2022-41318 A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7. | CVSS3: 8.6 | 3% Низкий | почти 4 года назад |
| CVE-2022-41318 A buffer over-read was discovered in libntlmauth in Squid 2.5 through ... | CVSS3: 8.6 | 3% Низкий | почти 4 года назад |
 | BDU:2023-00066 Уязвимость кэширующего прокси-сервера Squid, связанная с неправильным контролем доступа, позволяющая нарушителю получить доступ к конфиденциальной информации | CVSS3: 6.5 | 2% Низкий | почти 4 года назад |
 | RLSA-2022:6839 Important: squid security update | 3% Низкий | около 4 лет назад | |
| RLSA-2022:6775 Important: squid:4 security update | 3% Низкий | около 4 лет назад | |
| ELSA-2022-6839 ELSA-2022-6839: squid security update (IMPORTANT) | 3% Низкий | около 4 лет назад | |
| ELSA-2022-6815 ELSA-2022-6815: squid security update (IMPORTANT) | 3% Низкий | около 4 лет назад | |
| ELSA-2022-6775 ELSA-2022-6775: squid:4 security update (IMPORTANT) | 3% Низкий | около 4 лет назад | |
| BDU:2023-01309 Уязвимость интерфейса Security Support Provider Interface (SSPI) и реализации сетевого протокола Server Message Block (SMB) прокси-сервера Squid, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании | CVSS3: 8.9 | 3% Низкий | около 4 лет назад |
 | ROS-20230112-01 Уязвимость SQUID | CVSS3: 6.5 | 2% Низкий | почти 4 года назад |
| ROS-20230317-02 Уязвимость Squid | CVSS3: 7.5 | 3% Низкий | больше 3 лет назад |
Уязвимостей на страницу