https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:54:05 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:6775 <p><strong>Affected:</strong> AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid</p> <p>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.</p> <p>Security Fix(es):</p> <p>* squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid</p> <p>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.</p> <p>Security Fix(es):</p> <p>* squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:6775 https://cve.radiocsirt.org/vuln/bdu:2023-01309 bdu:2023-01309 https://cve.radiocsirt.org/vuln/bdu:2023-01309 https://cve.radiocsirt.org/vuln/cnvd-2022-88188 cnvd-2022-88188 https://cve.radiocsirt.org/vuln/cnvd-2022-88188 https://cve.radiocsirt.org/vuln/euvd-2026-229183 EUVD-2026-229183 https://cve.radiocsirt.org/vuln/euvd-2026-229183 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41318 <p>A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.</p> <p>A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41318 https://cve.radiocsirt.org/vuln/gsd-2022-41318 gsd-2022-41318 https://cve.radiocsirt.org/vuln/gsd-2022-41318 https://cve.radiocsirt.org/vuln/oesa-2022-1974 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: squid, openEuler:20.03-LTS-SP3: squid, openEuler:22.03-LTS: squid</p> <p>Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es): Exposure of Sensitive Information in Cache Manager https://github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq(CVE-2022-41317) Buffer Over Read in SSPI and SMB Authentication https://github.com/squid-cache/squid/security/advisories/GHSA-394c-rr7q-6g78(CVE-2022-41318)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: squid, openEuler:20.03-LTS-SP3: squid, openEuler:22.03-LTS: squid</p> <p>Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es): Exposure of Sensitive Information in Cache Manager https://github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq(CVE-2022-41317) Buffer Over Read in SSPI and SMB Authentication https://github.com/squid-cache/squid/security/advisories/GHSA-394c-rr7q-6g78(CVE-2022-41318)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1974 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12364-1 <p>squid-5.7-2.1 on GA media</p> <p>squid-5.7-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12364-1 https://cve.radiocsirt.org/vuln/rhsa-2022:6774 <p>squid: buffer-over-read in SSPI and SMB authentication</p> <p>squid: buffer-over-read in SSPI and SMB authentication</p> https://cve.radiocsirt.org/vuln/rhsa-2022:6774 https://cve.radiocsirt.org/vuln/suse-su-2022:3532-1 <p>Security update for squid</p> <p>Security update for squid</p> https://cve.radiocsirt.org/vuln/suse-su-2022:3532-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41318 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid, Ubuntu:22.04:LTS: squid</p> <p>A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid, Ubuntu:22.04:LTS: squid</p> <p>A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41318 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1505 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1505