Поиск уязвимостей
Количество 20
Количество 20
ALT-PU-2026-11170
ALT-PU-2026-11170: package `squid` update to version 7.6-alt2
openSUSE-SU-2026:22080-1
Security update for squid
SUSE-SU-2026:4621-1
Security update for squid
SUSE-SU-2026:4909-1
Security update for squid
CVE-2026-50012
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6.
CVE-2026-50012
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6.
CVE-2026-50012
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6.
CVE-2026-50012
Squid: Memory corruption in cache_digest reply handling
CVE-2026-50012
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper ...
CVE-2026-47729
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.
CVE-2026-47729
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.
CVE-2026-47729
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.
CVE-2026-47729
Squid: Memory disclosure in FTP gateway
CVE-2026-47729
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper ...
ALT-PU-2026-11716
ALT-PU-2026-11716: package `squid` update to version 7.6-alt2
ROS-20260908-80-0063
Уязвимость squid
BDU:2026-15339
Уязвимость прокси-сервера Squid, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код
BDU:2026-08611
Уязвимость функции strchr() прокси-сервера Squid, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20261001-73-0002
Уязвимость squid
ROS-20260901-80-0029
Уязвимость squid
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-11170 ALT-PU-2026-11170: package `squid` update to version 7.6-alt2 | CVSS3: 6.5 | 4 месяца назад | |
 | openSUSE-SU-2026:22080-1 Security update for squid | около 1 месяца назад | ||
| SUSE-SU-2026:4621-1 Security update for squid | 28 дней назад | ||
| SUSE-SU-2026:4909-1 Security update for squid | 14 дней назад | ||
 | CVE-2026-50012 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6. | CVSS3: 5.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-50012 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6. | CVSS3: 5.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-50012 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6. | CVSS3: 5.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-50012 Squid: Memory corruption in cache_digest reply handling | CVSS3: 5.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-50012 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper ... | CVSS3: 5.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-47729 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6. | CVSS3: 6.5 | 2% Низкий | 4 месяца назад |
| CVE-2026-47729 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6. | CVSS3: 6.5 | 2% Низкий | 5 месяцев назад |
| CVE-2026-47729 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6. | CVSS3: 6.5 | 2% Низкий | 4 месяца назад |
| CVE-2026-47729 Squid: Memory disclosure in FTP gateway | CVSS3: 6.5 | 2% Низкий | 4 месяца назад |
| CVE-2026-47729 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper ... | CVSS3: 6.5 | 2% Низкий | 4 месяца назад |
| ALT-PU-2026-11716 ALT-PU-2026-11716: package `squid` update to version 7.6-alt2 | CVSS3: 10 | 3 месяца назад | |
 | ROS-20260908-80-0063 Уязвимость squid | CVSS3: 5.5 | 1% Низкий | 2 месяца назад |
 | BDU:2026-15339 Уязвимость прокси-сервера Squid, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код | CVSS3: 5.5 | 1% Низкий | 4 месяца назад |
| BDU:2026-08611 Уязвимость функции strchr() прокси-сервера Squid, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 6.5 | 2% Низкий | 7 месяцев назад |
| ROS-20261001-73-0002 Уязвимость squid | CVSS3: 6.5 | 2% Низкий | около 1 месяца назад |
| ROS-20260901-80-0029 Уязвимость squid | CVSS3: 6.5 | 2% Низкий | 2 месяца назад |
Уязвимостей на страницу