Known vulnerabilities in squid (Red Hat package)
Vendor:
Red Hat Inc.
Software:
squid (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:squid_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
35
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.10-5.el10_0.2
5.5-5.el9_2.11
5.2-1.el9_0.10
5.5-19.el9_6.3
5.5-22.el9_7.4
6.10-5.el10_0.1
5.5-5.el9_2.10
3.5.20-17.el7_9.15
5.2-1.el9_0.9
5.5-13.el9_4.4
3.5.20-17.el7_9.14
3.1.23-16.el6_8.6
3.3.8-26.el7_2.3
3.1.23-16.el6_8.4
3.5.20-17.el7_9.13
3.5.20-17.el7_9.11
5.2-1.el9_0.7
5.5-13.el9_4.2
5.5-5.el9_2.8
5.5-14.el9_5.3
5.5-5.el9_2.7
5.5-13.el9_4
3.1.10-20.el6_5.3
3.1.10-1.el6_2.1
3.1.10-1.el6_1.1
2.6.STABLE21-6.el5
2.5.STABLE14-1.4E.el4_6.2
2.6.STABLE6-5.el5_1.3
2.5.STABLE14-1.4E.el4_6.1
2.6.STABLE6-5.el5_1.2
2.6.STABLE6-4.el5
5.2-1.el9_0.6
3.5.20-17.el7_9.10
5.5-5.el9_2.4
5.5-5.el9_2.6
5.5-6.el9_3.8
5.5-5.el9_2.5
5.2-1.el9_0.4
5.5-6.el9_3.5
3.5.20-12.el7_6.2
3.5.20-13.el7_7.1
5.5-6.el9_3.2
3.1.23-24.el6_10.1
3.5.20-17.el7_9.9
5.5-6.el9_3.1
5.5-5.el9_2.1
5.2-1.el9_0.3
5.2-1.el9_0.2
3.5.20-17.el7_9.8
3.5.20-17.el7_9.7
5.2-1.el9_0.1
3.5.20-17.el7_9.6
3.5.20-17.el7_9.4
4.4-8.module+el8.2.0+7834+b8ecaeef.2
3.5.20-15.el7_8.1
3.5.20-15.el7
3.3.8-12.el7_0
3.3.8-26.el7
3.5.20-2.el7
3.1.23-24.el6
3.1.23-16.el6_8
3.1.23-16.el6
3.1.23-9.el6
3.1.10-29.el6
3.1.10-22.el6_5
3.1.10-20.el6_5
3.1.10-19.el6_4
3.1.10-18.el6_4
3.1.10-16.el6
3.1.10-9.el6_3
3.1.10-1.el6_2
3.1.10-1.el6_1
3.1.10-1.el6
3.1.4-1.el6
Vulnerabilities (35)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124612 - Use After Free CVE-2026-32748 |
CWE-416 | Medium | 5.2-1.el9_0.10, 5.5-5.el9_2.11, 5.5-19.el9_6.3, 5.5-22.el9_7.4, 6.10-5.el10_0.2 | 25.03.2026 |
SB20260325206 SB2026033197 SB2026040350 and 15 more |
||
| #VU124610 - Use After Free CVE-2026-33526 |
CWE-416 | Medium | 5.2-1.el9_0.10, 5.5-5.el9_2.11, 5.5-19.el9_6.3, 5.5-22.el9_7.4, 6.10-5.el10_0.2 | 25.03.2026 |
SB20260325206 SB2026033197 SB2026040350 and 18 more |
||
| #VU117357 - Externally-generated error message containing sensitive information CVE-2025-62168 |
CWE-211 | Low | 3.5.20-17.el7_9.15, 5.2-1.el9_0.9, 5.5-5.el9_2.10, 5.5-13.el9_4.4, 6.10-5.el10_0.1 | 17.10.2025 |
SB2025101757 SB2025101803 SB2025101804 and 26 more |
||
| #VU113574 - Buffer over-read CVE-2025-54574 |
CWE-126 | Medium | 3.5.20-17.el7_9.14 | 01.08.2025 |
SB2023102416 SB2025082141 SB2025082502 and 5 more |
||
| #VU99355 - Resource Management Errors CVE-2024-45802 |
CWE-399 | Medium | 3.5.20-17.el7_9.11, 5.2-1.el9_0.7, 5.5-5.el9_2.8, 5.5-13.el9_4.2, 5.5-14.el9_5.3 | 28.10.2024 |
SB2024062519 SB2024110183 SB20241101108 and 17 more |
||
| #VU93235 - Out-of-bounds write CVE-2024-37894 |
CWE-787 | Medium | 5.5-5.el9_2.7, 5.5-13.el9_4 | 25.06.2024 |
SB2024062519 SB2024070286 SB2024070287 and 11 more |
||
| #VU87680 - Uncontrolled Recursion CVE-2024-25111 |
CWE-674 | Medium | 5.2-1.el9_0.6, 5.5-5.el9_2.6, 5.5-6.el9_3.8 | 20.03.2024 |
SB2024032067 SB2024032078 SB2024032634 and 24 more |
||
| #VU86547 - Improper input validation CVE-2024-25617 |
CWE-20 | Medium | 3.5.20-17.el7_9.10, 5.2-1.el9_0.6, 5.5-5.el9_2.5, 5.5-6.el9_3.8 | 15.02.2024 |
SB2024021536 SB2024030157 SB2024030601 and 20 more |
||
| #VU85722 - Expired pointer dereference CVE-2024-23638 |
CWE-825 | Medium | 5.5-13.el9_4 | 23.01.2024 |
SB2024012343 SB2024020237 SB2024020238 and 14 more |
||
| #VU84442 - Uncontrolled Recursion CVE-2023-50269 |
CWE-674 | Medium | 3.5.20-17.el7_9.10, 5.2-1.el9_0.4, 5.5-5.el9_2.4, 5.5-6.el9_3.8 | 15.12.2023 |
SB2023121502 SB2023122042 SB2023122043 and 20 more |
||
| #VU83629 - Out-of-bounds read CVE-2023-49285 |
CWE-125 | Medium | 3.5.20-17.el7_9.10, 5.2-1.el9_0.4, 5.5-6.el9_3.5 | 03.12.2023 |
SB2023120303 SB2023121253 SB2023121254 and 22 more |
||
| #VU83628 - Unchecked Return Value CVE-2023-49286 |
CWE-252 | Medium | 3.5.20-17.el7_9.10, 5.2-1.el9_0.4, 5.5-6.el9_3.5 | 03.12.2023 |
SB2023120303 SB2023121253 SB2023121254 and 20 more |
||
| #VU83379 - NULL Pointer Dereference CVE-2023-46728 |
CWE-476 | Medium | 3.5.20-17.el7_9.10, 5.2-1.el9_0.4, 5.5-6.el9_3.5 | 21.11.2023 |
SB2023090612 SB2023112157 SB2023112458 and 21 more |
||
| #VU82906 - Improper Certificate Validation CVE-2023-46724 |
CWE-295 | Medium | 3.5.20-17.el7_9.10, 5.2-1.el9_0.4, 5.5-6.el9_3.5 | 08.11.2023 |
SB2023102416 SB2023110805 SB2023110806 and 21 more |
||
| #VU82316 - Improper Handling of Structural Elements CVE-2023-5824 |
CWE-237 | Medium | 5.2-1.el9_0.3, 5.2-1.el9_0.4, 5.5-5.el9_2.1, 5.5-6.el9_3.1, 5.5-6.el9_3.2 | 24.10.2023 |
SB2023102416 SB2023110745 SB2023110746 and 21 more |
||
| #VU82315 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46846 |
CWE-444 | Medium | 3.5.20-17.el7_9.13, 5.2-1.el9_0.3, 5.5-5.el9_2.1, 5.5-6.el9_3.1 | 24.10.2023 |
SB2023102416 SB2023110745 SB2023110746 and 25 more |
||
| #VU82313 - Memory corruption CVE-2023-46847 |
CWE-119 | Medium | 3.1.23-24.el6_10.1, 3.5.20-12.el7_6.2, 3.5.20-13.el7_7.1, 3.5.20-17.el7_9.9, 5.2-1.el9_0.3, 5.5-5.el9_2.1, 5.5-6.el9_3.1 | 24.10.2023 |
SB2023102416 SB2023110745 SB2023110746 and 30 more |
||
| #VU80476 - Buffer overflow CVE-2023-46724 |
CWE-120 | Medium | 3.5.20-17.el7_9.10, 5.2-1.el9_0.4 | 06.09.2023 |
SB2023090612 SB2023112157 SB2023120441 and 10 more |
||
| #VU67609 - Out-of-bounds read CVE-2022-41318 |
CWE-125 | Medium | 3.5.20-17.el7_9.8, 5.2-1.el9_0.2 | 23.09.2022 |
SB2022092322 SB2022092651 SB2022100537 and 20 more |
||
| #VU53017 - Improper input validation CVE-2021-28651 |
CWE-20 | Medium | 3.5.20-17.el7_9.14 | 10.05.2021 |
SB2021051025 SB2021051925 SB2021052636 and 14 more |
Showing elements 1 - 20 out of 35