Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-33515
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.
CVE-2026-33515
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.
CVE-2026-33515
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.
CVE-2026-33515
Squid has issues in ICP message handling
CVE-2026-33515
Squid is a caching proxy for the Web. Prior to version 7.5, due to imp ...
ROS-20260505-80-0006
Уязвимость squid
BDU:2026-07323
Уязвимость прокси-сервера Squid, связанная с чтением за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:22080-1
Security update for squid
SUSE-SU-2026:4621-1
Security update for squid
ALT-PU-2026-5637
ALT-PU-2026-5637: package `squid` update to version 7.5-alt1
SUSE-SU-2026:4909-1
Security update for squid
ALT-PU-2026-11716
ALT-PU-2026-11716: package `squid` update to version 7.6-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch. | CVSS3: 6.5 | 1% Низкий | 8 месяцев назад | |
CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch. | CVSS3: 5.3 | 1% Низкий | 8 месяцев назад | |
CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch. | CVSS3: 6.5 | 1% Низкий | 8 месяцев назад | |
CVE-2026-33515 Squid has issues in ICP message handling | CVSS3: 5.3 | 1% Низкий | 8 месяцев назад | |
CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to imp ... | CVSS3: 6.5 | 1% Низкий | 8 месяцев назад | |
ROS-20260505-80-0006 Уязвимость squid | CVSS3: 7.2 | 1% Низкий | 6 месяцев назад | |
BDU:2026-07323 Уязвимость прокси-сервера Squid, связанная с чтением за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.2 | 1% Низкий | 8 месяцев назад | |
openSUSE-SU-2026:22080-1 Security update for squid | около 1 месяца назад | |||
SUSE-SU-2026:4621-1 Security update for squid | 28 дней назад | |||
ALT-PU-2026-5637 ALT-PU-2026-5637: package `squid` update to version 7.5-alt1 | CVSS3: 8.6 | 7 месяцев назад | ||
SUSE-SU-2026:4909-1 Security update for squid | 14 дней назад | |||
ALT-PU-2026-11716 ALT-PU-2026-11716: package `squid` update to version 7.6-alt2 | CVSS3: 10 | 3 месяца назад |
Уязвимостей на страницу