Approved changes feed: RSS · Atom

cpe:2.3:a:squid-cache:squid:2.5.stable8:*:*:*:*:*:*:*

part: a version: 2.5.stable8 update: *

VendorSquid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf)
ProductSquid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/squid purl2cpe 2026-06-01 10:14:53.272355
pkg:deb/ubuntu/squid purl2cpe 2026-06-01 10:14:53.272357
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:14:53.272358
pkg:rpm/fedora/squid purl2cpe 2026-06-01 10:14:53.272359
pkg:rpm/opensuse/squid purl2cpe 2026-06-01 10:14:53.272361

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31807 vulnerable 2026-06-08 05:31:53.932958 Details available
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.
Published: 2021-06-08T00:00:00.000Z
Updated: 2024-08-03T23:10:30.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6270 vulnerable 2026-06-08 05:05:56.957534 Details available
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.
Published: 2014-09-12T14:00:00.000Z
Updated: 2024-08-06T12:10:13.341Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.