Approved changes feed: RSS · Atom
cpe:2.3:a:squid-cache:squid:3.0:*:stable4:*:*:*:*:*part: a version: 3.0 update: *
| Vendor | Squid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf) |
|---|---|
| Product | Squid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd) |
| Edition | stable4 |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/squid |
purl2cpe | 2026-06-01 10:14:53.370129 |
pkg:deb/ubuntu/squid |
purl2cpe | 2026-06-01 10:14:53.370130 |
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:14:53.370132 |
pkg:rpm/fedora/squid |
purl2cpe | 2026-06-01 10:14:53.370133 |
pkg:rpm/opensuse/squid |
purl2cpe | 2026-06-01 10:14:53.370134 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4096 |
vulnerable | 2026-06-08 04:59:29.257787 |
Details available
The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.
Published: 2011-11-17T19:00:00.000Z
Updated: 2024-08-06T23:53:32.679Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2622 |
vulnerable | 2026-06-08 04:51:29.391920 |
Details available
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
Published: 2009-07-28T17:00:00.000Z
Updated: 2024-08-07T05:59:56.150Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2621 |
vulnerable | 2026-06-08 04:51:29.384314 |
Details available
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
Published: 2009-07-28T17:00:00.000Z
Updated: 2024-08-07T05:59:55.743Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.