Known vulnerabilities in squid (Debian package) - page 2

Vendor: Debian
Software CPE: cpe:2.3:o:debian:squid_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 55
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting squid (Debian package) squid (Debian package) is affected by 55 known vulnerabilities: 5 high, 40 medium, 10 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67609 - Out-of-bounds read
CVE-2022-41318
CWE-125 Medium
No
No
4.13-10+deb11u2 23.09.2022 SB2022092322
SB2022092651
SB2022100537
and 20 more
#VU67604 - Improper Access Control
CVE-2022-41317
CWE-284 Low
No
No
4.13-10+deb11u2 23.09.2022 SB2022092311
SB2022092651
SB2022100635
and 9 more
#VU64484 - Reachable Assertion
CVE-2021-46784
CWE-617 Medium
No
No
4.6-1+deb10u7, 4.13-10+deb11u1 18.06.2022 SB2022061801
SB2022062237
SB2022062908
and 20 more
#VU53599 - Resource Management Errors
CVE-2021-31807
CWE-399 Medium
Available
No
4.6-1+deb10u6 26.05.2021 SB2021051025
SB2021052636
SB2021060215
and 6 more
#VU53021 - Integer overflow
CVE-2021-31808
CWE-190 Medium
No
No
4.6-1+deb10u6 10.05.2021 SB2021051025
SB2021052636
SB2021060215
and 7 more
#VU53020 - Improper input validation
CVE-2021-31806
CWE-20 Medium
Available
No
4.6-1+deb10u6 10.05.2021 SB2021051025
SB2021052636
SB2021060215
and 9 more
#VU53019 - Missing release of memory after effective lifetime
CVE-2021-28652
CWE-401 Medium
No
No
4.6-1+deb10u6 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 10 more
#VU53018 - Improper input validation
CVE-2021-28662
CWE-20 Medium
No
No
4.6-1+deb10u6 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 9 more
#VU53017 - Improper input validation
CVE-2021-28651
CWE-20 Medium
No
No
4.6-1+deb10u6 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 14 more
#VU51248 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25097
CWE-444 Medium
No
No
4.6-1+deb10u5 08.03.2021 SB2021030801
SB2021032504
SB2021041206
and 16 more
#VU50457 - Out-of-bounds read
CVE-2021-28116
CWE-125 Medium
No
No
4.6-1+deb10u7, 4.13-10+deb11u1 09.02.2021 SB2021100402
SB2022051154
SB2021101120
and 7 more
#VU46118 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2020-15811
CWE-113 Medium
No
No
4.6-1+deb10u4 28.08.2020 SB2020082807
SB2020083119
SB2020090501
and 12 more
#VU46117 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15810
CWE-444 Medium
No
No
4.6-1+deb10u4 28.08.2020 SB2020082807
SB2020083119
SB2020090501
and 12 more
#VU45957 - Resource exhaustion
CVE-2020-24606
CWE-400 Low
No
No
4.6-1+deb10u4 23.08.2020 SB2020082301
SB2020083119
SB2020090501
and 13 more
#VU29391 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15049
CWE-444 Medium
No
No
4.6-1+deb10u3 30.06.2020 SB2020063011
SB2020090501
SB2020090724
and 10 more
#VU27677 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-18860
CWE-74 Low
No
No
4.6-1+deb10u3 11.05.2020 SB2020032011
SB2020051133
SB2020051324
and 4 more
#VU27669 - Missing Authentication for Critical Function
CVE-2019-12524
CWE-306 Low
No
No
4.6-1+deb10u2 11.05.2020 SB2020051116
SB2020110501
SB2021072198
and 3 more
#VU25019 - Out-of-bounds read
CVE-2019-12528
CWE-125 Medium
No
No
4.6-1+deb10u2 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 13 more
#VU22910 - Cross-Site Request Forgery (CSRF)
CVE-2019-18677
CWE-352 Medium
No
No
4.6-1+deb10u2 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 6 more
#VU22909 - Improper input validation
CVE-2019-18676
CWE-20 Medium
No
No
4.6-1+deb10u2 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 9 more


Showing elements 21 - 40 out of 55