https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:21:57.943193+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4743 ALSA-2020:4743 — Moderate: squid:4 security, bug fix, and enhancement update 2026-10-03T14:22:00.173460+00:00

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

The following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)

Security Fix(es):

* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)

* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)

* squid: Improper input validation in URI processor (CVE-2019-12523)

* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)

* squid: Heap overflow issue in URN processing (CVE-2019-12526)

* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)

* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)

* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)

* squid: Buffer overflow in URI processor (CVE-2019-18676)

* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)

* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)

* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)

* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)

* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)

* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)

* squid: DoS in TLS handshake (…

 https://cve.radiocsirt.org/vuln/bdu:2020-02595 bdu:2020-02595 2026-10-03T14:22:00.173620+00:00 bdu:2020-02595 https://cve.radiocsirt.org/vuln/cnvd-2020-25817 cnvd-2020-25817 2026-10-03T14:22:00.173641+00:00 cnvd-2020-25817 https://cve.radiocsirt.org/vuln/euvd-2026-55119 EUVD-2026-55119 2026-10-03T14:22:00.173655+00:00 EUVD-2026-55119 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12524 fkie_cve-2019-12524 2026-10-03T14:22:00.173667+00:00

An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer. This rule is implemented via url_regex. The handler for url_regex rules URL decodes an incoming request. This allows an attacker to encode their URL to bypass the url_regex check, and gain access to the blocked resource.

 https://cve.radiocsirt.org/vuln/ghsa-wwv6-9vqw-fwxx GHSA-wwv6-9vqw-fwxx 2026-10-03T14:22:00.173690+00:00

An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer. This rule is implemented via url_regex. The handler for url_regex rules URL decodes an incoming request. This allows an attacker to encode their URL to bypass the url_regex check, and gain access to the blocked resource.

 https://cve.radiocsirt.org/vuln/gsd-2019-12524 gsd-2019-12524 2026-10-03T14:22:00.173707+00:00 gsd-2019-12524 https://cve.radiocsirt.org/vuln/rhsa-2020:4743 RHSA-2020:4743 — Red Hat Security Advisory: squid:4 security, bug fix, and enhancement update 2026-10-03T14:22:00.173793+00:00

squid: Improper input validation in request allows for proxy manipulation squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash squid: Improper input validation in URI processor squid: Improper access restriction in url_regex may lead to security bypass squid: Heap overflow issue in URN processing squid: Information Disclosure issue in FTP Gateway squid: Out of bounds read in Proxy-Authorization header causes DoS squid: Denial of service in cachemgr.cgi squid: Buffer overflow in URI processor squid: Cross-Site Request Forgery issue in HTTP Request processing squid: HTTP Request Splitting issue in HTTP message processing squid: Information Disclosure issue in HTTP Digest Authentication squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour squid: Improper input validation issues in HTTP Request processing squid: Buffer overflow in reverse-proxy configurations squid: DoS in TLS handshake squid: Request smuggling and poisoning attack against the HTTP cache squid: Improper input validation could result in a DoS

 https://cve.radiocsirt.org/vuln/suse-su-2020:1227-1 SUSE-SU-2020:1227-1 — Security update for squid 2026-10-03T14:22:00.173847+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12524 UBUNTU-CVE-2019-12524 2026-10-03T14:22:00.173930+00:00

Affected: Ubuntu:18.04:LTS: squid3

An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer. This rule is implemented via url_regex. The handler for url_regex rules URL decodes an incoming request. This allows an attacker to encode their URL to bypass the url_regex check, and gain access to the blocked resource.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1594 WID-SEC-W-2022-1594 — Squid: Mehrere Schwachstellen 2026-10-03T14:22:00.173961+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.