Most recent entries from all

bdu:2026-15339

certfr-2026-avi-0795 — De multiples vulnérabilités ont été découvertes dans Squid. Elles permettent à un attaquant de provoquer une atteinte à…

certfr-2026-avi-0795

EUVD-2026-338472

fkie_cve-2026-50012

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6.

msrc_CVE-2026-50012 — Squid: Memory corruption in cache_digest reply handling

msrc_CVE-2026-50012

OESA-2026-2726 — squid security update

Affected: openEuler:22.03-LTS-SP4: squid, openEuler:24.03-LTS-SP1: squid, openEuler:24.03-LTS-SP3: squid, openEuler:20.03-LTS-SP4: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es):

['Hi all,', "CVE-2026-47729\n\nDue to a Improper Validation of Syntactic Correctness of Input\nbug, Squid is vulnerable to a Out-of-bounds Read\nattack against the FTP gateway.\n\nThis problem allows a trusted client to perform an Out-of-Bounds\nRead from random unrelated transactions when accessing a\nmisbehaving FTP server through Squid's gateway feature.\n\n<", '>\n\n\n\nCVE-2026-50012\n\nDue to an Improper Input Validation bug, Squid is vulnerable to\na Heap-based Buffer Overflow attack against cache digests.\n\nThis problem allows a trusted server to perform a Heap-based\nBuffer Overflow when sending maliciously crafted replies to\ncache_digest request messages.\n\nThis attack is limited to Squid instances that have been\ncompiled with the --enable-cache-digests option.\n\n<', '>', 'Amos Jeffries\nThe Squid Software Foundation'](CVE-2026-47729)

openSUSE-SU-2026:11937-1 — squid-7.7-2.1 on GA media

squid-7.7-2.1 on GA media

UBUNTU-CVE-2026-50012

Affected: Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:Pro:20.04:LTS: squid, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid, Ubuntu:25.10: squid, Ubuntu:26.04:LTS: squid

WID-SEC-W-2026-1920 — Squid: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um Informationen offenzulegen und um einen nicht näher spezifizierten Angriff durchzuführen.