squid-cache.org Squid 3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*part: a version: 3.0 update: *
| Vendor | Squid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf) |
|---|---|
| Product | Squid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/squid |
purl2cpe | 2026-06-01 10:14:53.335812 |
pkg:deb/ubuntu/squid |
purl2cpe | 2026-06-01 10:14:53.335814 |
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:14:53.335815 |
pkg:rpm/fedora/squid |
purl2cpe | 2026-06-01 10:14:53.335816 |
pkg:rpm/opensuse/squid |
purl2cpe | 2026-06-01 10:14:53.335818 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45802 |
vulnerable | 2026-06-08 06:48:09.059765 |
Squid Denial of Service
HIGH (7.5)
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.
Published: 2024-10-28T14:36:13.297Z
Updated: 2025-11-03T20:39:12.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4556 |
vulnerable | 2026-06-08 05:07:54.916431 |
Details available
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
Published: 2016-05-10T19:00:00.000Z
Updated: 2024-08-06T00:32:25.755Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4555 |
vulnerable | 2026-06-08 05:07:54.834222 |
Details available
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
Published: 2016-05-10T19:00:00.000Z
Updated: 2024-08-06T00:32:25.838Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4054 |
vulnerable | 2026-06-08 05:07:46.557395 |
Details available
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.010Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4053 |
vulnerable | 2026-06-08 05:07:46.553393 |
Details available
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.656Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4052 |
vulnerable | 2026-06-08 05:07:46.549765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4051 |
vulnerable | 2026-06-08 05:07:46.523514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3948 |
vulnerable | 2026-06-08 05:07:46.221026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2571 |
vulnerable | 2026-06-08 05:07:42.749108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2570 |
vulnerable | 2026-06-08 05:07:42.745247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2569 |
vulnerable | 2026-06-08 05:07:42.662728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6270 |
vulnerable | 2026-06-08 05:05:56.982300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5643 |
vulnerable | 2026-06-08 05:02:57.698493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4096 |
vulnerable | 2026-06-08 04:59:29.246470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3072 |
vulnerable | 2026-06-08 04:55:12.473334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0639 |
vulnerable | 2026-06-08 04:52:03.676694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0308 |
vulnerable | 2026-06-08 04:52:01.785110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.