Поиск уязвимостей
Количество 33
Количество 33
openSUSE-SU-2026:20027-1
Security update for squid
ROS-20251112-01
Множественные уязвимости squid
ALT-PU-2025-14197
ALT-PU-2025-14197: package `squid` update to version 7.3-alt1
CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This oc ...
ALT-PU-2026-11716
ALT-PU-2026-11716: package `squid` update to version 7.6-alt2
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
CVE-2025-62168
Squid vulnerable to information disclosure via authentication credential leakage in error handling
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, ...
SUSE-SU-2025:03627-1
Security update for squid
SUSE-SU-2025:03607-1
Security update for squid
SUSE-SU-2025:03606-1
Security update for squid
GHSA-jh85-mgr3-8f33
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
BDU:2025-14411
Уязвимость функции asn_build_objid() прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:4099-1
Security update for squid
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2026:20027-1 Security update for squid | 10 месяцев назад | ||
 | ROS-20251112-01 Множественные уязвимости squid | CVSS3: 10 | 12 месяцев назад | |
| ALT-PU-2025-14197 ALT-PU-2025-14197: package `squid` update to version 7.3-alt1 | CVSS3: 10 | 12 месяцев назад | |
 | CVE-2025-59362 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. | CVSS3: 4 | 0% Низкий | около 1 года назад |
 | CVE-2025-59362 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. | CVSS3: 5.3 | 0% Низкий | около 1 года назад |
 | CVE-2025-59362 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. | CVSS3: 4 | 0% Низкий | около 1 года назад |
 | CVE-2025-59362 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. | CVSS3: 8.2 | 0% Низкий | около 1 года назад |
| CVE-2025-59362 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This oc ... | CVSS3: 4 | 0% Низкий | около 1 года назад |
| ALT-PU-2026-11716 ALT-PU-2026-11716: package `squid` update to version 7.6-alt2 | CVSS3: 10 | 4 месяца назад | |
| CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off. | CVSS3: 7.5 | 65% Средний | около 1 года назад |
| CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off. | CVSS3: 8.6 | 65% Средний | около 1 года назад |
| CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off. | CVSS3: 7.5 | 65% Средний | около 1 года назад |
| CVE-2025-62168 Squid vulnerable to information disclosure via authentication credential leakage in error handling | CVSS3: 10 | 65% Средний | около 1 года назад |
| CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, ... | CVSS3: 7.5 | 65% Средний | около 1 года назад |
| SUSE-SU-2025:03627-1 Security update for squid | 0% Низкий | около 1 года назад | |
| SUSE-SU-2025:03607-1 Security update for squid | 0% Низкий | около 1 года назад | |
| SUSE-SU-2025:03606-1 Security update for squid | 0% Низкий | около 1 года назад | |
| GHSA-jh85-mgr3-8f33 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. | CVSS3: 8.2 | 0% Низкий | около 1 года назад |
 | BDU:2025-14411 Уязвимость функции asn_build_objid() прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4 | 0% Низкий | около 1 года назад |
| SUSE-SU-2025:4099-1 Security update for squid | 65% Средний | 12 месяцев назад |
Уязвимостей на страницу