Known vulnerabilities in squid (Ubuntu package) - page 3

Software CPE: cpe:2.3:o:canonical:squid_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 60
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting squid (Ubuntu package) squid (Ubuntu package) is affected by 60 known vulnerabilities: 4 high, 44 medium, 12 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46118 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2020-15811
CWE-113 Medium
No
No
3.5.12-1ubuntu7.15, 3.5.27-1ubuntu1.9, 4.10-1ubuntu1.2 28.08.2020 SB2020082807
SB2020083119
SB2020090501
and 12 more
#VU46117 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15810
CWE-444 Medium
No
No
3.5.12-1ubuntu7.15, 3.5.27-1ubuntu1.9, 4.10-1ubuntu1.2 28.08.2020 SB2020082807
SB2020083119
SB2020090501
and 12 more
#VU45957 - Resource exhaustion
CVE-2020-24606
CWE-400 Low
No
No
3.5.12-1ubuntu7.15, 3.5.27-1ubuntu1.9, 4.10-1ubuntu1.2 23.08.2020 SB2020082301
SB2020083119
SB2020090501
and 13 more
#VU27677 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-18860
CWE-74 Low
No
No
4.8-1ubuntu2.3, 4.10-1ubuntu1.1 11.05.2020 SB2020032011
SB2020051133
SB2020051324
and 4 more
#VU27669 - Missing Authentication for Critical Function
CVE-2019-12524
CWE-306 Low
No
No
3.5.12-1ubuntu7.12, 3.5.12-1ubuntu7.13, 3.5.27-1ubuntu1.7, 3.5.27-1ubuntu1.8 11.05.2020 SB2020051116
SB2020110501
SB2021072198
and 3 more
#VU27668 - Improper input validation
CVE-2019-12520
CWE-20 Low
No
No
3.5.12-1ubuntu7.12, 3.5.12-1ubuntu7.13, 3.5.27-1ubuntu1.7, 3.5.27-1ubuntu1.8 11.05.2020 SB2020051116
SB2020110501
SB2021072198
and 3 more
#VU27667 - Out-of-bounds write
CVE-2019-12521
CWE-787 Medium
No
No
4.8-1ubuntu2.3, 4.10-1ubuntu1.1 11.05.2020 SB2020042377
SB2020051116
SB2020051133
and 7 more
#VU27666 - Integer overflow
CVE-2020-11945
CWE-190 High
No
No
4.8-1ubuntu2.3, 4.10-1ubuntu1.1 11.05.2020 SB2020042377
SB2020051112
SB2020051113
and 15 more
#VU27665 - Out-of-bounds write
CVE-2019-12519
CWE-787 High
No
No
4.8-1ubuntu2.3, 4.10-1ubuntu1.1 11.05.2020 SB2020042377
SB2020051112
SB2020051113
and 12 more
#VU25020 - Memory corruption
CVE-2020-8517
CWE-119 Medium
No
No
4.8-1ubuntu2.2 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 6 more
#VU25019 - Out-of-bounds read
CVE-2019-12528
CWE-125 Medium
No
No
4.8-1ubuntu2.2 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 13 more
#VU25018 - Memory corruption
CVE-2020-8450
CWE-119 High
No
No
4.8-1ubuntu2.2 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 12 more
#VU25017 - Improper input validation
CVE-2020-8449
CWE-20 Medium
No
No
4.8-1ubuntu2.2 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 12 more
#VU22910 - Cross-Site Request Forgery (CSRF)
CVE-2019-18677
CWE-352 Medium
No
No
4.4-1ubuntu2.3, 4.8-1ubuntu2.1 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 6 more
#VU22909 - Improper input validation
CVE-2019-18676
CWE-20 Medium
No
No
3.5.12-1ubuntu7.12, 3.5.12-1ubuntu7.13, 3.5.27-1ubuntu1.7, 3.5.27-1ubuntu1.8, 4.4-1ubuntu2.3, 4.8-1ubuntu2.1 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 9 more
#VU22908 - Improper input validation
CVE-2019-12523
CWE-20 Medium
No
No
3.5.12-1ubuntu7.12, 3.5.12-1ubuntu7.13, 3.5.27-1ubuntu1.7, 3.5.27-1ubuntu1.8, 4.4-1ubuntu2.3, 4.8-1ubuntu2.1 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 9 more
#VU22589 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18679
CWE-200 Low
No
No
4.4-1ubuntu2.3, 4.8-1ubuntu2.1 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 9 more
#VU22587 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-18678
CWE-444 Medium
No
No
4.4-1ubuntu2.3, 4.8-1ubuntu2.1 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 8 more
#VU22585 - Heap-based Buffer Overflow
CVE-2019-12526
CWE-122 High
No
No
4.4-1ubuntu2.3, 4.8-1ubuntu2.1 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 9 more
#VU20461 - Out-of-bounds read
CVE-2019-12854
CWE-125 Medium
No
No
4.4-1ubuntu2.3, 4.8-1ubuntu2.1 29.08.2019 SB2019082403
SB2019112201
SB2019112202
and 5 more


Showing elements 41 - 60 out of 60