Skip to content

Squid-Cache · weakness class

Memory Corruption

38 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
22

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Denial of Service in HTTP Message Processing in SquidCVE-2023-49285squid-cache · CVSS 8.6 · 88% likely

    CWE-126

  2. Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.CVE-2016-4054Squid-Cache · 78% likely

    CWE-119

  3. An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.CVE-2020-8450Squid-Cache · 72% likely

    CWE-131

  4. SQUID-2023:11 Denial of Service in Cache ManagerCVE-2024-23638squid-cache · CVSS 6.5 · 60% likely

    CWE-825

  5. An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does…CVE-2019-12527Squid-Cache · 50% likely

    CWE-7871 bounty report

  6. Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corru…CVE-2013-4115Squid-Cache · 44% likely

    CWE-119

  7. Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to…CVE-2016-3948Squid-Cache · 35% likely

    CWE-119

  8. An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This oc…CVE-2020-11945Squid-Cache · 27% likely

    CWE-190

  9. An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It sear…CVE-2019-12525Squid-Cache · 24% likely

    CWE-787

  10. Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash)…CVE-2014-6270Squid-Cache · 23% likely

    CWE-119

  11. Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of serv…CVE-2009-2621Squid-Cache · 23% likely

    CWE-119

  12. Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is…CVE-2005-0211Squid-Cache · 22% likely

    CWE-119

  13. Squid's URN Handling can lead to Buffer OverflowCVE-2025-54574squid-cache · CVSS 9.3 · 22% likely

    CWE-122

  14. cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (resource consumption) via a crafted reques…CVE-2013-0189Squid-Cache · 22% likely

    CWE-119

  15. An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. When receiving data from a remote server in response to an U…CVE-2019-12526Squid-Cache · 20% likely

    CWE-7871 bounty report

  16. Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seedin…CVE-2016-4051Squid-Cache · 18% likely

    CWE-119

  17. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTT…CVE-2021-31807Squid-Cache · 16% likely

    CWE-190

  18. Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial o…CVE-2016-3947Squid-Cache · 15% likely

    CWE-119

  19. Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorre…CVE-2016-4053Squid-Cache · 14% likely

    CWE-119

  20. Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as pa…CVE-2021-28116Squid-Cache · CVSS 3.7 · 13% likely

    CWE-125

  21. The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header pr…CVE-2018-1000027Squid-Cache · 13% likely

    CWE-476

  22. Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted…CVE-2016-4052Squid-Cache · 13% likely

    CWE-119

  23. Squid vulnerable to Denial of Service in ICP Request handlingCVE-2026-33526squid-cache · CVSS 7.5 · 9.3% likely

    CWE-416

  24. An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clie…CVE-2019-18676Squid-Cache · 9.2% likely

    CWE-787

  25. An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization he…CVE-2019-12529Squid-Cache · 7.8% likely

    CWE-125

  26. An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the cre…CVE-2020-8517Squid-Cache · 6.8% likely

    CWE-7871 bounty report

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.