squid-cache.org Squid 2.7
Approved changes feed: RSS · Atom
cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*part: a version: 2.7 update: *
| Vendor | Squid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf) |
|---|---|
| Product | Squid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/squid |
purl2cpe | 2026-06-01 10:14:53.315203 |
pkg:deb/ubuntu/squid |
purl2cpe | 2026-06-01 10:14:53.315205 |
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:14:53.315206 |
pkg:rpm/fedora/squid |
purl2cpe | 2026-06-01 10:14:53.315207 |
pkg:rpm/opensuse/squid |
purl2cpe | 2026-06-01 10:14:53.315209 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15049 |
vulnerable | 2026-06-08 05:19:25.169647 |
Details available
CRITICAL (9.9)
An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace character prefix to the length field-value.
Published: 2020-06-30T17:55:55.000Z
Updated: 2024-08-04T13:08:21.396Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4051 |
vulnerable | 2026-06-08 05:07:46.523469 |
Details available
Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.083Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5643 |
vulnerable | 2026-06-08 05:02:57.696352 |
Details available
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
Published: 2012-12-20T11:00:00.000Z
Updated: 2024-08-06T21:14:15.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0639 |
vulnerable | 2026-06-08 04:52:03.674311 |
Details available
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
Published: 2010-02-15T18:00:00.000Z
Updated: 2024-08-07T00:52:20.117Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0308 |
vulnerable | 2026-06-08 04:52:01.784628 |
Details available
lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Published: 2010-02-03T18:00:00.000Z
Updated: 2024-08-07T00:45:11.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2855 |
vulnerable | 2026-06-08 04:51:30.878725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.