Approved changes feed: RSS · Atom

cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*

part: a version: 3.3.7 update: *

VendorSquid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf)
ProductSquid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/squid purl2cpe 2026-06-01 10:14:53.417484
pkg:deb/ubuntu/squid purl2cpe 2026-06-01 10:14:53.417485
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:14:53.417487
pkg:rpm/fedora/squid purl2cpe 2026-06-01 10:14:53.417488
pkg:rpm/opensuse/squid purl2cpe 2026-06-01 10:14:53.417489

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4556 vulnerable 2026-06-08 05:07:54.918330 Details available
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
Published: 2016-05-10T19:00:00.000Z
Updated: 2024-08-06T00:32:25.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4555 vulnerable 2026-06-08 05:07:54.885899 Details available
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
Published: 2016-05-10T19:00:00.000Z
Updated: 2024-08-06T00:32:25.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4054 vulnerable 2026-06-08 05:07:46.558850 Details available
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4053 vulnerable 2026-06-08 05:07:46.554892 Details available
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4052 vulnerable 2026-06-08 05:07:46.551284 Details available
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:29.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4051 vulnerable 2026-06-08 05:07:46.538762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3948 vulnerable 2026-06-08 05:07:46.223024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2571 vulnerable 2026-06-08 05:07:42.751052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2570 vulnerable 2026-06-08 05:07:42.747365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2569 vulnerable 2026-06-08 05:07:42.727654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10002 vulnerable 2026-06-08 05:07:16.978168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3455 vulnerable 2026-06-08 05:06:38.342293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7142 vulnerable 2026-06-08 05:05:58.736642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7141 vulnerable 2026-06-08 05:05:58.733858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6270 vulnerable 2026-06-08 05:05:57.040566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3609 vulnerable 2026-06-08 05:05:33.750223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0128 vulnerable 2026-06-08 05:05:11.699954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4123 vulnerable 2026-06-08 05:04:33.880486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.