squid-cache.org Squid Squid 3.5.20

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:squid-cache:squid:3.5.20:*:*:*:*:*:*:*

part: a version: 3.5.20 update: *

VendorSquid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf)
ProductSquid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/squid purl2cpe 2026-06-01 10:14:53.417769
pkg:deb/ubuntu/squid purl2cpe 2026-06-01 10:14:53.417770
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:14:53.417772
pkg:rpm/fedora/squid purl2cpe 2026-06-01 10:14:53.417773
pkg:rpm/opensuse/squid purl2cpe 2026-06-01 10:14:53.417775

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10002 vulnerable 2026-06-08 05:07:17.004449 Details available
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
Published: 2017-01-27T17:00:00.000Z
Updated: 2024-08-06T03:07:31.821Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.