squid-cache.org Squid 2.6

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:squid-cache:squid:2.6:*:*:*:*:*:*:*

part: a version: 2.6 update: *

VendorSquid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf)
ProductSquid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/squid purl2cpe 2026-06-01 10:14:53.272369
pkg:deb/ubuntu/squid purl2cpe 2026-06-01 10:14:53.272370
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:14:53.272371
pkg:rpm/fedora/squid purl2cpe 2026-06-01 10:14:53.272373
pkg:rpm/opensuse/squid purl2cpe 2026-06-01 10:14:53.272374

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50269 vulnerable 2026-06-08 06:16:15.866555 SQUID-2023:10 Denial of Service in HTTP Request parsing
HIGH (8.6)
Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.
Published: 2023-12-14T17:09:25.168Z
Updated: 2025-05-21T14:31:00.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31807 vulnerable 2026-06-08 05:31:53.937238 Details available
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.
Published: 2021-06-08T00:00:00.000Z
Updated: 2024-08-03T23:10:30.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4051 vulnerable 2026-06-08 05:07:46.522863 Details available
Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5643 vulnerable 2026-06-08 05:02:57.695711 Details available
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
Published: 2012-12-20T11:00:00.000Z
Updated: 2024-08-06T21:14:15.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0639 vulnerable 2026-06-08 04:52:03.674292 Details available
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
Published: 2010-02-15T18:00:00.000Z
Updated: 2024-08-07T00:52:20.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0308 vulnerable 2026-06-08 04:52:01.784122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.