squid-cache Squid 3.4.6
Approved changes feed: RSS · Atom
cpe:2.3:a:squid-cache:squid:3.4.6:*:*:*:*:*:*:*part: a version: 3.4.6 update: *
| Vendor | Squid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf) |
|---|---|
| Product | Squid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/squid |
purl2cpe | 2026-06-01 10:14:53.417620 |
pkg:deb/ubuntu/squid |
purl2cpe | 2026-06-01 10:14:53.417621 |
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:14:53.417623 |
pkg:rpm/fedora/squid |
purl2cpe | 2026-06-01 10:14:53.417624 |
pkg:rpm/opensuse/squid |
purl2cpe | 2026-06-01 10:14:53.417625 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-10002 |
vulnerable | 2026-06-08 05:07:16.987448 |
Details available
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
Published: 2017-01-27T17:00:00.000Z
Updated: 2024-08-06T03:07:31.821Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3455 |
vulnerable | 2026-06-08 05:06:38.350131 |
Details available
Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.
Published: 2015-05-18T15:00:00.000Z
Updated: 2024-08-06T05:47:57.745Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9749 |
vulnerable | 2026-06-08 05:06:12.925087 |
Details available
Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."
Published: 2015-11-06T21:00:00.000Z
Updated: 2024-08-06T13:55:04.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7142 |
vulnerable | 2026-06-08 05:05:58.736880 |
Details available
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
Published: 2014-11-26T15:00:00.000Z
Updated: 2024-08-06T12:40:19.097Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7141 |
vulnerable | 2026-06-08 05:05:58.734098 |
Details available
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
Published: 2014-11-26T15:00:00.000Z
Updated: 2024-08-06T12:40:19.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6270 |
vulnerable | 2026-06-08 05:05:57.047545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.