squid-cache Squid 2.7
Approved changes feed: RSS · Atom
cpe:2.3:a:squid-cache:squid:2.7:-:*:*:*:*:*:*part: a version: 2.7 update: -
| Vendor | Squid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf) |
|---|---|
| Product | Squid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/squid |
purl2cpe | 2026-06-01 10:14:53.315210 |
pkg:deb/ubuntu/squid |
purl2cpe | 2026-06-01 10:14:53.315211 |
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:14:53.315213 |
pkg:rpm/fedora/squid |
purl2cpe | 2026-06-01 10:14:53.315214 |
pkg:rpm/opensuse/squid |
purl2cpe | 2026-06-01 10:14:53.315215 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50269 |
vulnerable | 2026-06-08 06:16:15.867739 |
SQUID-2023:10 Denial of Service in HTTP Request parsing
HIGH (8.6)
Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.
Published: 2023-12-14T17:09:25.168Z
Updated: 2025-05-21T14:31:00.896Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31807 |
vulnerable | 2026-06-08 05:31:53.938233 |
Details available
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.
Published: 2021-06-08T00:00:00.000Z
Updated: 2024-08-03T23:10:30.180Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.