Known vulnerabilities in squid (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:squid_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 60
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting squid (Ubuntu package) squid (Ubuntu package) is affected by 60 known vulnerabilities: 4 high, 44 medium, 12 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67609 - Out-of-bounds read
CVE-2022-41318
CWE-125 Medium
No
No
Ubuntu Pro (Infra-only), 3.5.27-1ubuntu1.14, 4.10-1ubuntu1.7, 5.2-1ubuntu4.2 23.09.2022 SB2022092322
SB2022092651
SB2022100537
and 20 more
#VU67604 - Improper Access Control
CVE-2022-41317
CWE-284 Low
No
No
3.5.27-1ubuntu1.14, 4.10-1ubuntu1.7, 5.2-1ubuntu4.2 23.09.2022 SB2022092311
SB2022092651
SB2022100635
and 9 more
#VU65362 - Improper input validation
CVE-2021-33620
CWE-20 Medium
No
No
3.5.27-1ubuntu1.11, 4.10-1ubuntu1.4, 4.13-1ubuntu2.2, 4.13-1ubuntu4.1 15.07.2022 SB2022071601
SB2022072641
SB2023022337
and 6 more
#VU64484 - Reachable Assertion
CVE-2021-46784
CWE-617 Medium
No
No
3.5.27-1ubuntu1.13, 4.10-1ubuntu1.6, 4.13-10ubuntu5.1, 5.2-1ubuntu4.1 18.06.2022 SB2022061801
SB2022062237
SB2022062908
and 20 more
#VU53599 - Resource Management Errors
CVE-2021-31807
CWE-399 Medium
Available
No
3.5.27-1ubuntu1.11, 4.10-1ubuntu1.4, 4.13-1ubuntu2.2, 4.13-1ubuntu4.1 26.05.2021 SB2021051025
SB2021052636
SB2021060215
and 6 more
#VU53021 - Integer overflow
CVE-2021-31808
CWE-190 Medium
No
No
3.5.27-1ubuntu1.11, 4.10-1ubuntu1.4, 4.13-1ubuntu2.2, 4.13-1ubuntu4.1 10.05.2021 SB2021051025
SB2021052636
SB2021060215
and 7 more
#VU53020 - Improper input validation
CVE-2021-31806
CWE-20 Medium
Available
No
3.5.27-1ubuntu1.11, 4.10-1ubuntu1.4, 4.13-1ubuntu2.2, 4.13-1ubuntu4.1 10.05.2021 SB2021051025
SB2021052636
SB2021060215
and 9 more
#VU53019 - Missing release of memory after effective lifetime
CVE-2021-28652
CWE-401 Medium
No
No
3.5.27-1ubuntu1.11, 4.10-1ubuntu1.4, 4.13-1ubuntu2.2, 4.13-1ubuntu4.1 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 10 more
#VU53018 - Improper input validation
CVE-2021-28662
CWE-20 Medium
No
No
3.5.27-1ubuntu1.11, 4.10-1ubuntu1.4, 4.13-1ubuntu2.2, 4.13-1ubuntu4.1 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 9 more
#VU53017 - Improper input validation
CVE-2021-28651
CWE-20 Medium
No
No
Ubuntu Pro (Infra-only), 3.5.27-1ubuntu1.11, 4.10-1ubuntu1.4, 4.13-1ubuntu2.2, 4.13-1ubuntu4.1 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 14 more
#VU51248 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25097
CWE-444 Medium
No
No
3.5.12-1ubuntu7.16, 3.5.27-1ubuntu1.10, 4.10-1ubuntu1.3, 4.13-1ubuntu2.1 08.03.2021 SB2021030801
SB2021032504
SB2021041206
and 16 more
#VU50457 - Out-of-bounds read
CVE-2021-28116
CWE-125 Medium
No
No
3.5.27-1ubuntu1.12, 4.10-1ubuntu1.5, 4.13-1ubuntu4.2 09.02.2021 SB2021100402
SB2022051154
SB2021101120
and 7 more
#VU29391 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15049
CWE-444 Medium
No
No
3.5.12-1ubuntu7.15, 3.5.12-1ubuntu7.16, 3.5.27-1ubuntu1.9, 3.5.27-1ubuntu1.10, 4.10-1ubuntu1.3, 4.13-1ubuntu2.1 30.06.2020 SB2020063011
SB2020090501
SB2020090724
and 10 more
#VU10384 - Improper Access Control
CVE-2018-1000027
CWE-284 Low
No
No
Ubuntu Pro (Infra-only) 06.02.2018 SB2018020610
SB2018022305
SB2018092106
and 6 more
#VU10383 - NULL Pointer Dereference
CVE-2018-1000024
CWE-476 Medium
No
No
Ubuntu Pro (Infra-only) 06.02.2018 SB2018012312
SB2018020610
SB2018022305
and 7 more
#VU10164 - NULL Pointer Dereference
CVE-2018-1000027
CWE-476 Medium
No
No
Ubuntu Pro (Infra-only) 23.01.2018 SB2018012312
SB2022121201
SB2018012336
and 1 more
#VU4170 - Improper input validation
CVE-2016-2569
CWE-20 Low
No
No
Ubuntu Pro (Infra-only) 01.10.2016 SB2018020610
SB2016121404
SB2022121201
#VU4171 - Memory corruption
CVE-2016-2570
CWE-119 Low
No
No
Ubuntu Pro (Infra-only) 01.10.2016 SB2018020610
SB2016121405
SB2022121201
#VU4172 - Improper input validation
CVE-2016-2571
CWE-20 Low
No
No
Ubuntu Pro (Infra-only) 01.10.2016 SB2018020610
SB2016032103
SB2016121406
and 1 more
#VU4175 - Memory corruption
CVE-2016-3948
CWE-119 Low
No
No
Ubuntu Pro (Infra-only) 01.10.2016 SB2018020610
SB2022121201
SB2016040502
and 1 more


Showing elements 21 - 40 out of 60