https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:54:09.738335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6775 ALSA-2022:6775 — Important: squid:4 security update 2026-10-08T10:54:09.751454+00:00

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-01309 bdu:2023-01309 2026-10-08T10:54:09.751515+00:00 bdu:2023-01309 https://cve.radiocsirt.org/vuln/cnvd-2022-88188 cnvd-2022-88188 2026-10-08T10:54:09.751531+00:00 cnvd-2022-88188 https://cve.radiocsirt.org/vuln/euvd-2026-229183 EUVD-2026-229183 2026-10-08T10:54:09.751543+00:00 EUVD-2026-229183 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41318 fkie_cve-2022-41318 2026-10-08T10:54:09.751553+00:00

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

 https://cve.radiocsirt.org/vuln/gsd-2022-41318 gsd-2022-41318 2026-10-08T10:54:09.751574+00:00 gsd-2022-41318 https://cve.radiocsirt.org/vuln/oesa-2022-1974 OESA-2022-1974 — squid security update 2026-10-08T10:54:09.751584+00:00

Affected: openEuler:20.03-LTS-SP1: squid, openEuler:20.03-LTS-SP3: squid, openEuler:22.03-LTS: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es): Exposure of Sensitive Information in Cache Manager https://github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq(CVE-2022-41317) Buffer Over Read in SSPI and SMB Authentication https://github.com/squid-cache/squid/security/advisories/GHSA-394c-rr7q-6g78(CVE-2022-41318)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12364-1 openSUSE-SU-2024:12364-1 — squid-5.7-2.1 on GA media 2026-10-08T10:54:09.751609+00:00

squid-5.7-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:6774 RHSA-2022:6774 — Red Hat Security Advisory: squid:4 security update 2026-10-08T10:54:09.751625+00:00

squid: buffer-over-read in SSPI and SMB authentication

 https://cve.radiocsirt.org/vuln/suse-su-2022:3532-1 SUSE-SU-2022:3532-1 — Security update for squid 2026-10-08T10:54:09.751640+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41318 UBUNTU-CVE-2022-41318 2026-10-08T10:54:09.751653+00:00

Affected: Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid, Ubuntu:22.04:LTS: squid

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1505 WID-SEC-W-2022-1505 — Squid: Mehrere Schwachstellen 2026-10-08T10:54:09.751675+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.