squid-cache

Records112All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high49CVSS 7.0–8.9

Exploited now

squid-cache records in CISA KEV

No squid-cache vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Squid 111 records CRITICAL

Records

111 records in Squid · all components

TI-2025-38486 CVE-2025-62168

Squid vulnerable to information disclosure via authentication credential leakage in error handling

CRITICAL 85

Squid is a caching proxy for the Web.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.64816 Published 2025-10-17 Partial fix · 7.2 CWE-209

TI-2024-16845 CVE-2024-25617

Denial of Service in HTTP Header parser in squid proxy

HIGH 81

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.88094 Published 2024-02-14 Partial fix · 6.5 CWE-182

TI-2024-16566 CVE-2024-25111

SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

HIGH 79

Squid is a web proxy cache.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.65254 Published 2024-03-06 Fixed in 6.8 CWE-674

TI-2023-26921 CVE-2023-49285

Denial of Service in HTTP Message Processing in Squid

HIGH 79

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.88144 Published 2023-12-04 Partial fix · 6.5 CWE-126

TI-2023-27496 CVE-2023-50269

SQUID-2023:10 Denial of Service in HTTP Request parsing

HIGH 77

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.57627 Published 2023-12-14 Partial fix · 6.6 CWE-674

TI-2023-25306 CVE-2023-46847

Squid: denial of service in http digest authentication

HIGH 77

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.78513 Published 2023-11-03 Fixed in 6.4, 7:3.4.14-15.el6_10.1 +13 CWE-120

TI-2016-03919 CVE-2016-4553 · GHSA-p6vj-j24g-56wp

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the…

HIGH 77

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.79969 Published 2016-05-10 Fixed CWE-345

TI-2016-03444 CVE-2016-4054 · GHSA-4qf5-r4mp-pqp5

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers…

HIGH 75

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.77559 Published 2016-04-25 Fixed CWE-119

TI-2021-11804 CVE-2021-31806 · GHSA-3v8m-hgx9-fgh9

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.

HIGH 73

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.95333 Published 2021-05-27 Partial fix CWE-116

TI-2020-06787 CVE-2020-8450 · GHSA-vrcq-r42v-wc44

An issue was discovered in Squid before 4.10.

HIGH 70

An issue was discovered in Squid before 4.10.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.7179 Published 2020-02-04 Partial fix CWE-131

TI-2024-30769 CVE-2024-45802

Squid Denial of Service

HIGH 69

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.47879 Published 2024-10-28 Partial fix · 6.10 CWE-20

TI-2021-12995 CVE-2021-33620 · GHSA-56g5-gjqr-cc85

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service…

HIGH 69

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.79583 Published 2021-05-28 Partial fix CWE-20

TI-2019-09358 CVE-2019-12527 · GHSA-8x4r-gffh-rx7f

An issue was discovered in Squid 4.0.23 through 4.7.

HIGH 69

An issue was discovered in Squid 4.0.23 through 4.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.49037 Published 2019-07-11 Fixed CWE-787

TI-2025-34351 CVE-2025-54574

Squid's URN Handling can lead to Buffer Overflow

HIGH 68

Squid is a caching proxy for the Web.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22133 Published 2025-08-01 Partial fix · 6.4 CWE-122

TI-2021-09730 CVE-2021-28662

An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6.

HIGH 67

An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.7176 Published 2021-05-27 Fixed CWE-116

TI-2014-05961 CVE-2014-7141 · GHSA-2vjp-6qwj-v6m6

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive…

HIGH 67

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.76064 Published 2014-11-26 No fix listed CWE-19

TI-2019-10026 CVE-2019-13345 · GHSA-3cp8-63m9-w97j

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

HIGH 66

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.74477 Published 2019-07-05 Partial fix CWE-79

TI-2020-09609 CVE-2020-11945 · GHSA-82gh-fr9f-867h

An issue was discovered in Squid before 5.0.2.

MEDIUM 64

An issue was discovered in Squid before 5.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.27246 Published 2020-04-23 Partial fix CWE-190

TI-2016-03920 CVE-2016-4554 · GHSA-p847-vwj5-4q73

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended…

MEDIUM 64

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.38893 Published 2016-05-10 Partial fix CWE-345

TI-2024-15657 CVE-2024-23638

SQUID-2023:11 Denial of Service in Cache Manager

MEDIUM 63

Squid is a caching proxy for the Web.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.6005 Published 2024-01-23 Partial fix · 6.6 CWE-825

TI-2019-09356 CVE-2019-12525 · GHSA-wxh3-97xf-wv5x

An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7.

MEDIUM 63

An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24401 Published 2019-07-11 Partial fix CWE-787

TI-2013-03601 CVE-2013-4123 · GHSA-gpv8-rwm7-v9hg

client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote…

MEDIUM 63

client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.80451 Published 2013-09-16 No fix listed CWE-20

TI-2013-03594 CVE-2013-4115 · GHSA-8f69-q75r-2vcf

Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through…

MEDIUM 62

Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long…