Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown

CVE-2016-10002

Disclosure Date: January 27, 2017 (last updated November 25, 2024)
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
0
0
Attacker Value
Unknown

CVE-2016-4555

Disclosure Date: May 10, 2016 (last updated November 25, 2024)
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
0
0
Attacker Value
Unknown

CVE-2016-4556

Disclosure Date: May 10, 2016 (last updated November 25, 2024)
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
0
0
Attacker Value
Unknown

CVE-2016-4053

Disclosure Date: April 25, 2016 (last updated November 25, 2024)
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
0
0
Attacker Value
Unknown

CVE-2016-4051

Disclosure Date: April 25, 2016 (last updated November 25, 2024)
Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.
0
0
Attacker Value
Unknown

CVE-2016-4052

Disclosure Date: April 25, 2016 (last updated November 25, 2024)
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.
0
0
Attacker Value
Unknown

CVE-2016-4054

Disclosure Date: April 25, 2016 (last updated November 25, 2024)
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
0
0
Attacker Value
Unknown

CVE-2014-7142

Disclosure Date: November 26, 2014 (last updated October 05, 2023)
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
0
0
Attacker Value
Unknown

CVE-2014-7141

Disclosure Date: November 26, 2014 (last updated October 05, 2023)
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
0
0
Attacker Value
Unknown

CVE-2013-0189

Disclosure Date: February 08, 2013 (last updated November 08, 2023)
cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or incorrect comparison.
0
0