https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:01:53.887898+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:0046 ALSA-2024:0046 — Important: squid:4 security update 2026-10-03T22:01:54.157837+00:00

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: Denial of Service in SSL Certificate validation (CVE-2023-46724) * squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728) * squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285) * squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-07699 bdu:2023-07699 2026-10-03T22:01:54.157905+00:00 bdu:2023-07699 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0902 certfr-2023-avi-0902 — Une vulnérabilité a été découverte dans Squid. Elle permet à un attaquant de provoquer un déni de service à distance. 2026-10-03T22:01:54.157922+00:00 certfr-2023-avi-0902 https://cve.radiocsirt.org/vuln/euvd-2026-216918 EUVD-2026-216918 2026-10-03T22:01:54.157936+00:00 EUVD-2026-216918 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46724 fkie_cve-2023-46724 2026-10-03T22:01:54.157947+00:00

Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.

 https://cve.radiocsirt.org/vuln/gsd-2023-46724 gsd-2023-46724 2026-10-03T22:01:54.157974+00:00 gsd-2023-46724 https://cve.radiocsirt.org/vuln/oesa-2023-1794 OESA-2023-1794 — squid security update 2026-10-03T22:01:54.157985+00:00

Affected: openEuler:20.03-LTS-SP1: squid, openEuler:20.03-LTS-SP3: squid, openEuler:22.03-LTS: squid, openEuler:22.03-LTS-SP1: squid, openEuler:22.03-LTS-SP2: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es): Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.(CVE-2023-46724) Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to u…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13398-1 openSUSE-SU-2024:13398-1 — squid-6.4-1.1 on GA media 2026-10-03T22:01:54.158027+00:00

squid-6.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:0072 RHSA-2024:0072 — Red Hat Security Advisory: squid security update 2026-10-03T22:01:54.158047+00:00

squid: DoS against HTTP and HTTPS squid: Denial of Service in SSL Certificate validation squid: NULL pointer dereference in the gopher protocol code squid: Buffer over-read in the HTTP Message processing feature squid: Incorrect Check of Function Return Value In Helper Process management squid-cache: Squid Buffer Overflow

 https://cve.radiocsirt.org/vuln/suse-su-2023:4381-1 SUSE-SU-2023:4381-1 — Security update for squid 2026-10-03T22:01:54.158069+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-46724 UBUNTU-CVE-2023-46724 2026-10-03T22:01:54.158085+00:00

Affected: Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid

Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2801 WID-SEC-W-2023-2801 — Squid: Schwachstelle ermöglicht Denial of Service 2026-10-03T22:01:54.158111+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um einen Denial of Service Angriff durchzuführen.