https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:12:09.662569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4743 ALSA-2020:4743 — Moderate: squid:4 security, bug fix, and enhancement update 2026-10-04T14:12:09.856703+00:00

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

The following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)

Security Fix(es):

* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)

* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)

* squid: Improper input validation in URI processor (CVE-2019-12523)

* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)

* squid: Heap overflow issue in URN processing (CVE-2019-12526)

* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)

* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)

* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)

* squid: Buffer overflow in URI processor (CVE-2019-18676)

* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)

* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)

* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)

* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)

* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)

* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)

* squid: DoS in TLS handshake (…

 https://cve.radiocsirt.org/vuln/bdu:2021-01724 bdu:2021-01724 2026-10-04T14:12:09.856787+00:00 bdu:2021-01724 https://cve.radiocsirt.org/vuln/certfr-2020-avi-239 certfr-2020-avi-239 — De multiples vulnérabilités ont été découvertes dans Squid. Elles permettent à un attaquant de provoquer une exécution… 2026-10-04T14:12:09.856805+00:00 certfr-2020-avi-239 https://cve.radiocsirt.org/vuln/cnvd-2020-25815 cnvd-2020-25815 2026-10-04T14:12:09.856820+00:00 cnvd-2020-25815 https://cve.radiocsirt.org/vuln/euvd-2026-55145 EUVD-2026-55145 2026-10-04T14:12:09.856832+00:00 EUVD-2026-55145 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12521 fkie_cve-2019-12521 2026-10-04T14:12:09.856842+00:00

An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed, it is added via addStackElement. addStackElement has a check for the number of elements in this buffer, but it's off by 1, leading to a Heap Overflow of 1 element. The overflow is within the same structure so it can't affect adjacent memory blocks, and thus just leads to a crash while processing.

 https://cve.radiocsirt.org/vuln/ghsa-7mv4-9v7r-5gq3 GHSA-7mv4-9v7r-5gq3 2026-10-04T14:12:09.856865+00:00

An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed, it is added via addStackElement. addStackElement has a check for the number of elements in this buffer, but it's off by 1, leading to a Heap Overflow of 1 element. The overflow is within the same structure so it can't affect adjacent memory blocks, and thus just leads to a crash while processing.

 https://cve.radiocsirt.org/vuln/gsd-2019-12521 gsd-2019-12521 2026-10-04T14:12:09.856882+00:00 gsd-2019-12521 https://cve.radiocsirt.org/vuln/oesa-2022-1851 OESA-2022-1851 — squid security update 2026-10-04T14:12:09.856891+00:00

Affected: openEuler:20.03-LTS-SP1: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es): An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed, it is added via addStackElement. addStackElement has a check for the number of elements in this buffer, but it s off by 1, leading to a Heap Overflow of 1 element. The overflow is within the same structure so it can t affect adjacent memory blocks, and thus just leads to a crash while processing.(CVE-2019-12521)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0623-1 openSUSE-SU-2020:0623-1 — Security update for squid 2026-10-04T14:12:09.856914+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/suse-su-2020:1134-1 SUSE-SU-2020:1134-1 — Security update for squid 2026-10-04T14:12:09.856932+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12521 UBUNTU-CVE-2019-12521 2026-10-04T14:12:09.856950+00:00

Affected: Ubuntu:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid

An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed, it is added via addStackElement. addStackElement has a check for the number of elements in this buffer, but it's off by 1, leading to a Heap Overflow of 1 element. The overflow is within the same structure so it can't affect adjacent memory blocks, and thus just leads to a crash while processing.