Find a vulnerability

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 7.7",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-61642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61642"
    }
  ],
  "initial_release_date": "2026-09-14T00:00:00",
  "last_revision_date": "2026-09-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1168",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": "2026-09-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-537g-4gfh-w7m6",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-537g-4gfh-w7m6"
    },
    {
      "published_at": "2026-09-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-vh99-xw7j-fx5c",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-vh99-xw7j-fx5c"
    },
    {
      "published_at": "2026-09-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-j9pf-q9f6-v44c",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-j9pf-q9f6-v44c"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 7.6",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-50012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50012"
    },
    {
      "name": "CVE-2026-47729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47729"
    }
  ],
  "initial_release_date": "2026-06-23T00:00:00",
  "last_revision_date": "2026-06-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0795",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": "2026-06-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-8c37-pxjq-qwrg",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-8c37-pxjq-qwrg"
    },
    {
      "published_at": "2026-06-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-5vmx-9x64-9284",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-5vmx-9x64-9284"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "squid versions ant\u00e9rieures \u00e0 7.5",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-32748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32748"
    },
    {
      "name": "CVE-2026-33526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33526"
    },
    {
      "name": "CVE-2026-33515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33515"
    }
  ],
  "initial_release_date": "2026-03-25T00:00:00",
  "last_revision_date": "2026-03-25T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0350",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": "2026-03-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-84p4-hcx7-jj7c",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-84p4-hcx7-jj7c"
    },
    {
      "published_at": "2026-03-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-f9p7-3jqg-hhvq",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-f9p7-3jqg-hhvq"
    },
    {
      "published_at": "2026-03-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-hpfx-h48q-gvwg",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-hpfx-h48q-gvwg"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "squid versions 7.x ant\u00e9rieures \u00e0 7.2",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-62168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-62168"
    }
  ],
  "initial_release_date": "2025-10-17T00:00:00",
  "last_revision_date": "2025-10-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0889",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-10-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Squid. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": "2025-10-17",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-c8cc-phh7-xmxr",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "squid versions ant\u00e9rieures \u00e0 6.4",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-54574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54574"
    }
  ],
  "initial_release_date": "2025-08-01T00:00:00",
  "last_revision_date": "2025-08-01T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0647",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-08-01T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Squid. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": "2025-07-31",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-w4gv-vw3f-29g3",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions post\u00e9rieures \u00e0 3.0 et ant\u00e9rieures \u00e0 6.10 sans l\u0027option de compilation --disable-esi",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-45802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45802"
    }
  ],
  "initial_release_date": "2024-10-28T00:00:00",
  "last_revision_date": "2024-10-28T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0928",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-10-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Squid. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": "2024-10-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-f975-v7qw-q7hj",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "squid versions ant\u00e9rieures \u00e0 6.8",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2024-25111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25111"
    }
  ],
  "initial_release_date": "2024-03-05T00:00:00",
  "last_revision_date": "2024-03-05T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0182",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-03-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans \u003cspan class=\"textit\"\u003eles\nproduits Squid\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni\nde service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-72c2-c3wm-8qxc du 05 mars 2024",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-72c2-c3wm-8qxc"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 6.5",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2024-25617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25617"
    }
  ],
  "initial_release_date": "2024-02-15T00:00:00",
  "last_revision_date": "2024-02-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0135",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-02-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Squid. Elle permet \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid du 14 f\u00e9vrier 2024",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-h5x6-w8mv-xfpr"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 2.6.x \u00e0 6.5.x ant\u00e9rieures \u00e0 6.6",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-50269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50269"
    }
  ],
  "initial_release_date": "2023-12-14T00:00:00",
  "last_revision_date": "2023-12-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-1030",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-12-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans \u003cspan\nclass=\"textit\"\u003eSquid\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer un\nd\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-wgq4-4cfg-c4x3 du 14 d\u00e9cembre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 6.5",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-49286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49286"
    },
    {
      "name": "CVE-2023-49285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-49285"
    }
  ],
  "initial_release_date": "2023-12-04T00:00:00",
  "last_revision_date": "2023-12-04T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Squid CVE-2023-49285 du 02 d\u00e9cembre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-8w9r-p88v-mmx9"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Squid CVE-2023-49286 du 02 d\u00e9cembre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-xggx-9329-3c27"
    }
  ],
  "reference": "CERTFR-2023-AVI-0993",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-12-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid CVE-2023-49286 du 02 d\u00e9cembre 2023",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid GHSA-rj5h-46j6-q2g5 du 02 d\u00e9cembre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid CVE-2023-49285 du 02 d\u00e9cembre 2023",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 3.3.0.1 \u00e0 6.3.x ant\u00e9rieures \u00e0 6.4",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-46724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46724"
    }
  ],
  "initial_release_date": "2023-11-02T00:00:00",
  "last_revision_date": "2023-11-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0902",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-11-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Squid. Elle permet \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid CVE-2023-46724 du 01 novembre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-73m6-jm96-c6r3"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 6.4",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2023-10-23T00:00:00",
  "last_revision_date": "2023-10-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0876",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-10-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et\nun contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2023:1 du 21 octobre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2023:2 du 21 octobre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-543m-w2m2-g255"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2023:5 du 21 octobre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2021:8 du 27 septembre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-cg5h-v6vc-w33f"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2023:3 du 21 octobre 2023",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 4.12",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 5.0.x ant\u00e9rieures \u00e0 5.0.3",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-15049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15049"
    }
  ],
  "initial_release_date": "2020-06-29T00:00:00",
  "last_revision_date": "2020-06-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-393",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-06-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Squid. Elle permet \u00e0 un\nattaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9 et\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid du 26 juin 2020",
      "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-qf3v-rc95-96j5"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 4.11",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 5.0.x ant\u00e9rieures \u00e0 5.0.2",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-12519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12519"
    },
    {
      "name": "CVE-2019-12521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12521"
    },
    {
      "name": "CVE-2020-11945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11945"
    }
  ],
  "initial_release_date": "2020-04-23T00:00:00",
  "last_revision_date": "2020-04-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-239",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-04-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2019_12 du 23 avril 2020",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_12.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2020_4 du 23 avril 2020",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2020_4.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid 3.5.x sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 4.10",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-8450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8450"
    },
    {
      "name": "CVE-2020-8517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8517"
    },
    {
      "name": "CVE-2019-12528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12528"
    },
    {
      "name": "CVE-2020-8449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8449"
    }
  ],
  "initial_release_date": "2020-02-04T00:00:00",
  "last_revision_date": "2020-02-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-070",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-02-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Certaines\nd\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2020_3 du 04 f\u00e9vrier 2020",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2020_3.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2020_1 du 04 f\u00e9vrier 2020",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2020_1.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2020_2 du 04 f\u00e9vrier 2020",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2020_2.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 2.x",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 3.x",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 4.x ant\u00e9rieures \u00e0 4.9",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-12523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12523"
    },
    {
      "name": "CVE-2019-18679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18679"
    },
    {
      "name": "CVE-2019-12526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12526"
    },
    {
      "name": "CVE-2019-18676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18676"
    },
    {
      "name": "CVE-2019-18678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18678"
    },
    {
      "name": "CVE-2019-18677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18677"
    }
  ],
  "initial_release_date": "2019-11-12T00:00:00",
  "last_revision_date": "2019-11-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2019-AVI-552",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-11-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une\ninjection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SQUID-2019:10 du 05 novembre 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_10.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SQUID-2019:11 du 05 novembre 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_11.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SQUID-2019:09 du 05 novembre 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_9.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SQUID-2019:08 du 05 novembre 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_8.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SQUID-2019:07 du 05 novembre 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_7.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 4.8",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-12527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12527"
    },
    {
      "name": "CVE-2019-13345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13345"
    },
    {
      "name": "CVE-2019-12854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12854"
    },
    {
      "name": "CVE-2019-12529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12529"
    },
    {
      "name": "CVE-2019-12525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12525"
    }
  ],
  "initial_release_date": "2019-07-15T00:00:00",
  "last_revision_date": "2019-07-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2019-AVI-332",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid. Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2019_1 du 12 juillet 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_1.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2019_5 du 12 juillet 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_5.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2019_6 du 12 juillet 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_6.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2019_2 du 12 juillet 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_2.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2019_3 du 12 juillet 2019",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2019_3.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 3.5 et ant\u00e9rieures sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 4.4",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2018-10-29T00:00:00",
  "last_revision_date": "2018-10-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-518",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-10-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid . Elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et\nune injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2018_5 du 28 octobre 2018",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2018_5.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2018_4 du 28 octobre 2018",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2018_4.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 4.0.13",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-1172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1172"
    }
  ],
  "initial_release_date": "2018-04-23T00:00:00",
  "last_revision_date": "2018-04-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-192",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-04-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Squid . Elle permet \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2018_3 du 18 avril 2018",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2018_3.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 3.x ant\u00e9rieures \u00e0 3.5.27",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 4.x ant\u00e9rieures \u00e0 4.0.22",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2018-01-22T00:00:00",
  "last_revision_date": "2018-01-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-046",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-01-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Squid . Elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2018:2 du 19 janvier 2018",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2018_2.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2018:1 du 19 janvier 2018",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2018_1.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 3.1 \u00e0 3.5.22",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 4.0 \u00e0 4.0.16",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-10003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10003"
    },
    {
      "name": "CVE-2016-10002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10002"
    }
  ],
  "initial_release_date": "2016-12-19T00:00:00",
  "last_revision_date": "2016-12-19T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:10 du 16 d\u00e9cembre    2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_10.txt"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:11 du 16 d\u00e9cembre    2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_11.txt"
    }
  ],
  "reference": "CERTFR-2016-AVI-422",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-12-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eSquid\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:10 du 16 d\u00e9cembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:11 du 16 d\u00e9cembre 2016",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 3.5.18",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 4.x ant\u00e9rieures \u00e0 4.0.10",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-4556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4556"
    },
    {
      "name": "CVE-2016-4553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4553"
    },
    {
      "name": "CVE-2016-4555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4555"
    },
    {
      "name": "CVE-2016-4554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4554"
    }
  ],
  "initial_release_date": "2016-05-09T00:00:00",
  "last_revision_date": "2016-05-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2016-AVI-157",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-05-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eSquid\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:8 du 06 mai 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:9 du 06 mai 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:7 du 06 mai 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid 3.x versions ant\u00e9rieures \u00e0 3.5.17",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid 4.x versions ant\u00e9rieures \u00e0 4.0.9",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-4053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4053"
    },
    {
      "name": "CVE-2016-4051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4051"
    },
    {
      "name": "CVE-2016-4054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4054"
    },
    {
      "name": "CVE-2016-4052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4052"
    }
  ],
  "initial_release_date": "2016-04-21T00:00:00",
  "last_revision_date": "2016-04-21T00:00:00",
  "links": [],
  "reference": "CERTFR-2016-AVI-141",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-04-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eSquid\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de\nservice \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:6 du 20 avril 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:5 du 20 avril 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 3.x ant\u00e9rieures \u00e0 3.1.16",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 4.x ant\u00e9rieures \u00e0 4.0.8",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-3948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3948"
    },
    {
      "name": "CVE-2016-3947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-3947"
    }
  ],
  "initial_release_date": "2016-04-04T00:00:00",
  "last_revision_date": "2016-04-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2016-AVI-112",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-04-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eSquid\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:4 du 02 avril 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_4.txt"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:3 du 02 avril 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_3.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 4.0.6",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 3.5.14",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2016-02-17T00:00:00",
  "last_revision_date": "2016-02-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2016-AVI-067",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-02-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eSquid\u003c/span\u003e.\nElle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2016:1 du 16 f\u00e9vrier 2016",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_1.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "versions 3.4 \u00e0 3.4.12",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "versions 3.3 \u00e0 3.3.13",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "versions 3.2 \u00e0 3.2.13",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "versions 3.5 \u00e0 3.5.3",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-3455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3455"
    }
  ],
  "initial_release_date": "2015-05-04T00:00:00",
  "last_revision_date": "2015-05-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-200",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-05-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eSquid\u003c/span\u003e.\nElle permet \u00e0 un attaquant de provoquer un contournement de la politique\nde s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid du 01 mai 2015",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2015_1.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Versions ant\u00e9rieures \u00e0 Squid 3.3.13",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "versions ant\u00e9rieures \u00e0 Squid 3.4.7",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3609"
    }
  ],
  "initial_release_date": "2014-09-02T00:00:00",
  "last_revision_date": "2014-09-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-369",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-09-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eSquid\u003c/span\u003e.\nElle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid du 28 ao\u00fbt 2014",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2014_2.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 3.3.12",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions ant\u00e9rieures \u00e0 3.4.4",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-0128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0128"
    }
  ],
  "initial_release_date": "2014-03-11T00:00:00",
  "last_revision_date": "2014-03-11T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-113",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-03-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eSquid\u003c/span\u003e.\nElle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid SQUID-2014:1 du 09 mars 2014",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2014_1.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 3.3.7 et ant\u00e9rieures",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid versions 3.2.12 et ant\u00e9rieures",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-4123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4123"
    }
  ],
  "initial_release_date": "2013-07-15T00:00:00",
  "last_revision_date": "2013-07-15T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-410",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eSquid\u003c/span\u003e.\nElle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid du 13 juillet 2013",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2013_3.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid 3.3",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid 3.1",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid 3.2",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    },
    {
      "description": "Squid 3.0",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2013-07-11T00:00:00",
  "last_revision_date": "2013-07-11T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-409",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-07-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eSquid\u003c/span\u003e.\nElle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Squid du 11 juillet 2013",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2013_2.txt"
    }
  ]
}