squid-cache Squid 3.5.27
Approved changes feed: RSS · Atom
cpe:2.3:a:squid-cache:squid:3.5.27:*:*:*:*:*:*:*part: a version: 3.5.27 update: *
| Vendor | Squid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf) |
|---|---|
| Product | Squid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/squid |
purl2cpe | 2026-06-01 10:14:53.417819 |
pkg:deb/ubuntu/squid |
purl2cpe | 2026-06-01 10:14:53.417821 |
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:14:53.417822 |
pkg:rpm/fedora/squid |
purl2cpe | 2026-06-01 10:14:53.417824 |
pkg:rpm/opensuse/squid |
purl2cpe | 2026-06-01 10:14:53.417825 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25111 |
vulnerable | 2026-06-08 06:31:22.160608 |
SQUID-2024:1 Denial of Service in HTTP Chunked Decoding
HIGH (8.6)
Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunked, encoded HTTP Message. This bug is fixed in Squid version 6.8. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. There is no workaround for this issue.
Published: 2024-03-06T18:14:28.889Z
Updated: 2025-11-03T20:36:53.752Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1172 |
vulnerable | 2026-06-08 05:11:17.105324 |
Details available
This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck(). A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition to users of the system. Was ZDI-CAN-6088.
Published: 2018-05-16T21:00:00.000Z
Updated: 2024-08-05T03:51:48.966Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.