Skip to content

Squid-Cache · weakness class

Denial of Service

9 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
5

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Denial of Service in HTTP Header parser in squid proxyCVE-2024-25617squid-cache · CVSS 5.3 · 89% likely

    CWE-400

  2. SQUID-2024:1 Denial of Service in HTTP Chunked DecodingCVE-2024-25111squid-cache · CVSS 8.6 · 65% likely

    CWE-674

  3. SQUID-2023:10 Denial of Service in HTTP Request parsingCVE-2023-50269squid-cache · CVSS 8.6 · 58% likely

    CWE-674

  4. The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containi…CVE-2011-4096Squid-Cache · 37% likely

    CWE-399

  5. Denial of Service in Helper Process managementCVE-2023-49286squid-cache · CVSS 8.6 · 10% likely

    CWE-617

  6. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, th…CVE-2021-28651Squid-Cache · 7.4% likely

    CWE-401

  7. Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.CVE-2018-19132Squid-Cache · 5.9% likely

    CWE-772

  8. In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.CVE-2021-46784Squid-Cache · 5.1% likely

    CWE-617

  9. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This all…CVE-2021-28652Squid-Cache · 4.3% likely

    CWE-401

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.