Most recent entries from all

ALSA-2020:4743 — Moderate: squid:4 security, bug fix, and enhancement update

2026-10-03T07:52:56.564638+00:00

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

The following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)

Security Fix(es):

* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)

* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)

* squid: Improper input validation in URI processor (CVE-2019-12523)

* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)

* squid: Heap overflow issue in URN processing (CVE-2019-12526)

* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)

* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)

* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)

* squid: Buffer overflow in URI processor (CVE-2019-18676)

* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)

* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)

* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)

* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)

* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)

* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)

* squid: DoS in TLS handshake (…

bdu:2020-02597

2026-10-03T07:52:56.564729+00:00

bdu:2020-02597

certfr-2020-avi-070 — De multiples vulnérabilités ont été découvertes dans Squid. Certaines d'entre elles permettent à un attaquant de provoq…

2026-10-03T07:52:56.564748+00:00

certfr-2020-avi-070

cnvd-2020-04520

2026-10-03T07:52:56.564765+00:00

cnvd-2020-04520

EUVD-2026-38452

2026-10-03T07:52:56.564777+00:00

EUVD-2026-38452

fkie_cve-2020-8450

2026-10-03T07:52:56.564788+00:00

An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.

GHSA-vrcq-r42v-wc44

2026-10-03T07:52:56.564808+00:00

An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.

gsd-2020-8450

2026-10-03T07:52:56.564824+00:00

gsd-2020-8450

openSUSE-SU-2020:0307-1 — Security update for squid

2026-10-03T07:52:56.564835+00:00

Security update for squid

SUSE-SU-2020:0487-1 — Security update for squid

2026-10-03T07:52:56.564853+00:00

Security update for squid

UBUNTU-CVE-2020-8450

2026-10-03T07:52:56.564869+00:00

Affected: Ubuntu:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid

An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.

WID-SEC-W-2023-1361 — Squid: Mehrere Schwachstellen

2026-10-03T07:52:56.564891+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen, Sicherheitsvorkehrungen zu umgehen oder Code zur Ausführung zu bringen.