Approved changes feed: RSS · Atom

cpe:2.3:a:squid-cache:squid:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

VendorSquid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf)
ProductSquid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/squid purl2cpe 2026-06-01 10:14:53.257039
pkg:deb/ubuntu/squid purl2cpe 2026-06-01 10:14:53.257041
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:14:53.257042
pkg:rpm/fedora/squid purl2cpe 2026-06-01 10:14:53.257043
pkg:rpm/opensuse/squid purl2cpe 2026-06-01 10:14:53.257045

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4051 vulnerable 2026-06-08 05:07:46.520561 Details available
Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5643 vulnerable 2026-06-08 05:02:57.693705 Details available
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
Published: 2012-12-20T11:00:00.000Z
Updated: 2024-08-06T21:14:15.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0639 vulnerable 2026-06-08 04:52:03.674219 Details available
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
Published: 2010-02-15T18:00:00.000Z
Updated: 2024-08-07T00:52:20.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0308 vulnerable 2026-06-08 04:52:01.782191 Details available
lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Published: 2010-02-03T18:00:00.000Z
Updated: 2024-08-07T00:45:11.819Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.