Input Validation and Logic

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.CVE-2013-4123Squid-Cache · 80% likely

   CWE-20

2. Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a head…CVE-2021-33620Squid-Cache · CVSS 6.5 · 80% likely

   CWE-20

3. Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol i…CVE-2009-2622Squid-Cache · 57% likely

   CWE-20

4. HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unide…CVE-2014-3609Squid-Cache · 56% likely

   CWE-20

5. Squid Denial of ServiceCVE-2024-45802squid-cache · CVSS 7.5 · 46% likely

   CWE-20

6. The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that…CVE-2009-2855Squid-Cache · 34% likely

   CWE-20

7. Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, relat…CVE-2014-0128Squid-Cache · 33% likely

   CWE-20

8. Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemo…CVE-2016-2569Squid-Cache · 31% likely

   CWE-20

9. lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet th…CVE-2010-0308Squid-Cache · 28% likely

   CWE-20

10. The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl…CVE-2016-2390Squid-Cache · 26% likely

    CWE-20

11. The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.CVE-2014-7142Squid-Cache · 25% likely

    CWE-20

12. Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denia…CVE-2012-5643Squid-Cache · 23% likely

    CWE-20

13. client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.CVE-2016-4555Squid-Cache · 18% likely

    CWE-20

14. The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU c…CVE-2013-1839Squid-Cache · 17% likely

    CWE-20

15. Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hos…CVE-2015-3455Squid-Cache · 11% likely

    CWE-20

16. http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure…CVE-2016-2572Squid-Cache · 10% likely

    CWE-20

17. http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a den…CVE-2016-2571Squid-Cache · 9.3% likely

    CWE-20

18. The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a de…CVE-2016-2570Squid-Cache · 9.0% likely

    CWE-20

19. Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some p…CVE-2016-10003Squid-Cache · 4.8% likely

    CWE-697

20. An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by making a MD5 hash of the…CVE-2019-12520Squid-Cache · 3.9% likely

    CWE-201 bounty report

21. An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed against HTTP and HTTPS traffic. Thi…CVE-2020-15811Squid-Cache · 3.8% likely

    CWE-6971 bounty report

22. An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about client…CVE-2022-41317Squid-Cache · CVSS 6.5 · 1.8% likely

    CWE-697

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.