Approved changes feed: RSS · Atom

cpe:2.3:a:squid-cache:squid:2.5.stable5:*:*:*:*:*:*:*

part: a version: 2.5.stable5 update: *

VendorSquid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf)
ProductSquid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/squid purl2cpe 2026-06-01 10:14:53.272335
pkg:deb/ubuntu/squid purl2cpe 2026-06-01 10:14:53.272337
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:14:53.272338
pkg:rpm/fedora/squid purl2cpe 2026-06-01 10:14:53.272339
pkg:rpm/opensuse/squid purl2cpe 2026-06-01 10:14:53.272341

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31807 vulnerable 2026-06-08 05:31:53.930969 Details available
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.
Published: 2021-06-08T00:00:00.000Z
Updated: 2024-08-03T23:10:30.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6270 vulnerable 2026-06-08 05:05:56.955861 Details available
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.
Published: 2014-09-12T14:00:00.000Z
Updated: 2024-08-06T12:10:13.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0211 vulnerable 2026-06-08 04:48:11.883003 Details available
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Published: 2005-02-06T05:00:00.000Z
Updated: 2024-08-07T21:05:25.302Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.