squid-cache Vulnerability Advisory Catalog

Total 101 security vulnerabilities recorded for squid-cache software and firmware.

← Back to All Vendors
Component: squid

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in sr...

📅 2026-07-16
CVSS 5.5 Dossier →
Component: squid

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/Ft...

📅 2026-07-16
CVSS 6.5 Dossier →
Component: squid

Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP tra...

📅 2026-03-26
CVSS 7.5 Dossier →
Component: squid

Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ...

📅 2026-03-26
CVSS 6.5 Dossier →
Component: squid

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs...

📅 2026-03-26
CVSS 7.5 Dossier →
CVE-2025-62168 CRITICAL
Component: squid

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows inf...

📅 2025-10-17
CVSS 10.0 Dossier →
Component: squid

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c....

📅 2025-09-26
CVSS 4.0 Dossier →
CVE-2025-54574 CRITICAL
Component: squid

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution atta...

📅 2025-08-01
CVSS 9.3 Dossier →
Component: squid

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During...

📅 2024-10-28
CVSS 7.5 Dossier →
Component: squid

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is...

📅 2024-06-25
CVSS 6.3 Dossier →
Component: squid

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Ch...

📅 2024-03-06
CVSS 8.6 Dossier →
Component: squid

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be...

📅 2024-02-14
CVSS 5.3 Dossier →
Component: squid

Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack ...

📅 2024-01-24
CVSS 6.5 Dossier →
Component: squid

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions...

📅 2023-12-14
CVSS 8.6 Dossier →
Component: squid

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can...

📅 2023-12-04
CVSS 8.6 Dossier →
Component: squid

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable...

📅 2023-12-04
CVSS 8.6 Dossier →
Component: squid

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service at...

📅 2023-12-04
CVSS 8.6 Dossier →
Component: squid

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of S...

📅 2023-11-06
CVSS 7.5 Dossier →
Component: squid

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTT...

📅 2023-11-03
CVSS 7.5 Dossier →
Component: squid

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp...

📅 2023-11-03
CVSS 8.6 Dossier →
Component: squid

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to hea...

📅 2023-11-03
CVSS 8.6 Dossier →
CVE-2023-46846 CRITICAL
Component: squid

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past...

📅 2023-11-03
CVSS 9.3 Dossier →
Component: squid

Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 co...

📅 2023-11-01
CVSS 8.6 Dossier →
Component: squid

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authenticati...

📅 2022-12-25
CVSS 8.6 Dossier →
Page 1 of 5 (101 Total Records)