https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:44:31.937178+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4743 ALSA-2020:4743 — Moderate: squid:4 security, bug fix, and enhancement update 2026-10-03T17:44:32.181358+00:00

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

The following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)

Security Fix(es):

* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)

* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)

* squid: Improper input validation in URI processor (CVE-2019-12523)

* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)

* squid: Heap overflow issue in URN processing (CVE-2019-12526)

* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)

* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)

* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)

* squid: Buffer overflow in URI processor (CVE-2019-18676)

* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)

* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)

* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)

* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)

* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)

* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)

* squid: DoS in TLS handshake (…

 https://cve.radiocsirt.org/vuln/bdu:2020-01857 bdu:2020-01857 2026-10-03T17:44:32.181450+00:00 bdu:2020-01857 https://cve.radiocsirt.org/vuln/certfr-2019-avi-552 certfr-2019-avi-552 — De multiples vulnérabilités ont été découvertes dans Squid. Elles permettent à un attaquant de provoquer une exécution… 2026-10-03T17:44:32.181469+00:00 certfr-2019-avi-552 https://cve.radiocsirt.org/vuln/cnvd-2019-42425 cnvd-2019-42425 2026-10-03T17:44:32.181486+00:00 cnvd-2019-42425 https://cve.radiocsirt.org/vuln/euvd-2026-58783 EUVD-2026-58783 2026-10-03T17:44:32.181499+00:00 EUVD-2026-58783 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18676 fkie_cve-2019-18676 2026-10-03T17:44:32.181510+00:00

An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote client that can reach the proxy port can trivially perform the attack via a crafted URI scheme.

 https://cve.radiocsirt.org/vuln/ghsa-chw7-jm99-chw8 GHSA-chw7-jm99-chw8 2026-10-03T17:44:32.181534+00:00

An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote client that can reach the proxy port can trivially perform the attack via a crafted URI scheme.

 https://cve.radiocsirt.org/vuln/gsd-2019-18676 gsd-2019-18676 2026-10-03T17:44:32.181549+00:00 gsd-2019-18676 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2540-1 openSUSE-SU-2019:2540-1 — Security update for squid 2026-10-03T17:44:32.181560+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/suse-su-2019:2975-1 SUSE-SU-2019:2975-1 — Security update for squid 2026-10-03T17:44:32.181583+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-18676 UBUNTU-CVE-2019-18676 2026-10-03T17:44:32.181605+00:00

Affected: Ubuntu:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid

An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote client that can reach the proxy port can trivially perform the attack via a crafted URI scheme.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1592 WID-SEC-W-2022-1592 — Squid: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsvorkehrungen 2026-10-03T17:44:32.181628+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um Sicherheitsvorkehrungen zu umgehen.