https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:32:16 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:2593 <p><strong>Affected:</strong> AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel</p> <p>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.</p> <p>Security Fix(es):</p> <p>* squid: heap-based buffer overflow in HttpHeader::getAuth (CVE-2019-12527)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel</p> <p>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.</p> <p>Security Fix(es):</p> <p>* squid: heap-based buffer overflow in HttpHeader::getAuth (CVE-2019-12527)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:2593 https://cve.radiocsirt.org/vuln/bdu:2020-02396 bdu:2020-02396 https://cve.radiocsirt.org/vuln/bdu:2020-02396 https://cve.radiocsirt.org/vuln/certfr-2019-avi-332 certfr-2019-avi-332 https://cve.radiocsirt.org/vuln/certfr-2019-avi-332 https://cve.radiocsirt.org/vuln/cnvd-2019-23865 cnvd-2019-23865 https://cve.radiocsirt.org/vuln/cnvd-2019-23865 https://cve.radiocsirt.org/vuln/euvd-2026-55124 EUVD-2026-55124 https://cve.radiocsirt.org/vuln/euvd-2026-55124 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12527 <p>An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn&#39;t greater than the buffer, leading to a heap-based buffer overflow with user controlled data.</p> <p>An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn&#39;t greater than the buffer, leading to a heap-based buffer overflow with user controlled data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12527 https://cve.radiocsirt.org/vuln/ghsa-8x4r-gffh-rx7f <p>An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn&#39;t greater than the buffer, leading to a heap-based buffer overflow with user controlled data.</p> <p>An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn&#39;t greater than the buffer, leading to a heap-based buffer overflow with user controlled data.</p> https://cve.radiocsirt.org/vuln/ghsa-8x4r-gffh-rx7f https://cve.radiocsirt.org/vuln/gsd-2019-12527 gsd-2019-12527 https://cve.radiocsirt.org/vuln/gsd-2019-12527 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2540-1 <p>Security update for squid</p> <p>Security update for squid</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2540-1 https://cve.radiocsirt.org/vuln/suse-su-2019:2975-1 <p>Security update for squid</p> <p>Security update for squid</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2975-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2486 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2486