CVE-2025-54574
- EPSS 0.86%
- Published 01.08.2025 18:02:19
- Last modified 26.08.2025 16:55:12
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To wo...
CVE-2024-45802
- EPSS 0.5%
- Published 28.10.2024 15:15:04
- Last modified 03.01.2025 12:15:26
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerab...
CVE-2024-37894
- EPSS 1.31%
- Published 25.06.2024 20:15:11
- Last modified 26.08.2025 17:20:11
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.
CVE-2024-25111
- EPSS 1.8%
- Published 06.03.2024 19:15:07
- Last modified 10.04.2025 17:44:48
Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause D...
CVE-2024-25617
- EPSS 1.12%
- Published 14.02.2024 21:15:08
- Last modified 25.06.2025 20:51:35
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote ...
CVE-2024-23638
- EPSS 14.31%
- Published 24.01.2024 00:15:08
- Last modified 21.11.2024 08:58:03
Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Ser...
CVE-2023-50269
- EPSS 1.15%
- Published 14.12.2023 18:15:45
- Last modified 21.11.2024 08:36:47
Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsi...
CVE-2023-49285
- EPSS 10.67%
- Published 04.12.2023 23:15:27
- Last modified 21.11.2024 08:33:11
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advise...
CVE-2023-49286
- EPSS 5.16%
- Published 04.12.2023 23:15:27
- Last modified 21.11.2024 08:33:11
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid ver...
CVE-2023-49288
- EPSS 1.66%
- Published 04.12.2023 23:15:27
- Last modified 21.11.2024 08:33:11
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to a...