Known vulnerabilities in squid (Alpine package)

Vendor: Alpine Linux Development Team
Software: squid (Alpine package)
Software CPE: cpe:2.3:o:alpine:squid_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting squid (Alpine package) squid (Alpine package) is affected by 39 known vulnerabilities: 7 high, 22 medium, 10 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25020 - Memory corruption
CVE-2020-8517		 CWE-119 Medium
No
No
 3.5.27-r4 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 6 more
#VU25019 - Out-of-bounds read
CVE-2019-12528		 CWE-125 Medium
No
No
 3.5.27-r4 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 13 more
#VU25018 - Memory corruption
CVE-2020-8450		 CWE-119 High
No
No
 3.5.27-r4 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 12 more
#VU25017 - Improper input validation
CVE-2020-8449		 CWE-20 Medium
No
No
 3.5.27-r4 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 12 more
#VU22589 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18679		 CWE-200 Low
No
No
 3.5.27-r4 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 9 more
#VU20460 - Out-of-bounds read
CVE-2019-12529		 CWE-125 Low
No
No
 - 29.08.2019 SB2019082403
SB2019112201
SB2019112202
and 6 more
#VU20445 - Memory corruption
CVE-2019-12525		 CWE-119 Medium
No
No
 - 28.08.2019 SB2019082403
SB2019112201
SB2019112202
and 10 more
#VU19140 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13345		 CWE-79 Medium
No
No
 3.5.27-r1, 3.5.27-r3 11.07.2019 SB2019071101
SB2019071804
SB2019082010
and 13 more
#VU12437 - Improper input validation
CVE-2018-1172		 CWE-20 Low
No
No
 3.5.27-r2 08.05.2018 SB2018051415
SB2018062025
#VU10384 - Improper Access Control
CVE-2018-1000027		 CWE-284 Low
No
No
 3.5.27-r0 06.02.2018 SB2018020610
SB2018022305
SB2018092106
and 6 more
#VU4170 - Improper input validation
CVE-2016-2569		 CWE-20 Low
No
No
 3.4.14-r3 01.10.2016 SB2018020610
SB2016121404
SB2022121201
#VU4171 - Memory corruption
CVE-2016-2570		 CWE-119 Low
No
No
 3.4.14-r3 01.10.2016 SB2018020610
SB2016121405
SB2022121201
#VU4172 - Improper input validation
CVE-2016-2571		 CWE-20 Low
No
No
 3.4.14-r3 01.10.2016 SB2018020610
SB2016032103
SB2016121406
and 2 more
#VU32273 - Improper input validation
CVE-2016-4556		 CWE-20 Medium
No
No
 3.4.14-r2 10.05.2016 SB2016051019
SB2016072906
#VU32272 - Improper input validation
CVE-2016-4555		 CWE-20 Medium
No
No
 3.4.14-r2 10.05.2016 SB2016051018
SB2016072905
#VU32271 - Insufficient Verification of Data Authenticity
CVE-2016-4554		 CWE-345 High
No
No
 3.4.14-r2 10.05.2016 SB2016051017
SB2016072904
#VU32300 - Memory corruption
CVE-2016-4054		 CWE-119 High
No
No
 3.4.14-r1 25.04.2016 SB2016042504
SB2016050939
#VU32299 - Memory corruption
CVE-2016-4053		 CWE-119 Low
No
No
 3.4.14-r1 25.04.2016 SB2016042503
SB2016050938
#VU32298 - Stack-based buffer overflow
CVE-2016-4052		 CWE-121 High
No
No
 3.4.14-r1 25.04.2016 SB2016042502
SB2016050937
#VU32297 - Heap-based Buffer Overflow
CVE-2016-3947		 CWE-122 High
No
No
 3.4.14-r1 07.04.2016 SB2016040704
SB2016050936
SB2016040502
and 1 more


Showing elements 1 - 20 out of 39