Known vulnerabilities in Squid 3.0.stable11 - page 2

Software: Squid
Version: 3.0.stable11
Software CPE: cpe:2.3:a:squid-cache_org:squid:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 49
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Squid version 3.0.stable11 Squid 3.0.stable11 is affected by 49 vulnerabilities: 6 high, 40 medium, 3 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45957 - Resource exhaustion
CVE-2020-24606
CWE-400 Low
No
No
4.13, 5.0.4 23.08.2020 SB2020082301
SB2020083119
SB2020090501
and 13 more
#VU29391 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15049
CWE-444 Medium
No
No
4.12, 5.0.3 30.06.2020 SB2020063011
SB2020090501
SB2020090724
and 10 more
#VU27667 - Out-of-bounds write
CVE-2019-12521
CWE-787 Medium
No
No
4.8, 5.0.2 11.05.2020 SB2020042377
SB2020051116
SB2020051133
and 7 more
#VU27666 - Integer overflow
CVE-2020-11945
CWE-190 High
No
No
4.11, 5.0.2 11.05.2020 SB2020042377
SB2020051112
SB2020051113
and 15 more
#VU27665 - Out-of-bounds write
CVE-2019-12519
CWE-787 High
No
No
4.11 11.05.2020 SB2020042377
SB2020051112
SB2020051113
and 12 more
#VU25020 - Memory corruption
CVE-2020-8517
CWE-119 Medium
No
No
4.10 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 6 more
#VU25019 - Out-of-bounds read
CVE-2019-12528
CWE-125 Medium
No
No
4.10 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 13 more
#VU25018 - Memory corruption
CVE-2020-8450
CWE-119 High
No
No
4.10 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 12 more
#VU25017 - Improper input validation
CVE-2020-8449
CWE-20 Medium
No
No
4.10 07.02.2020 SB2020020702
SB2020022108
SB2020030601
and 12 more
#VU22910 - Cross-Site Request Forgery (CSRF)
CVE-2019-18677
CWE-352 Medium
No
No
4.9 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 6 more
#VU22909 - Improper input validation
CVE-2019-18676
CWE-20 Medium
No
No
4.9 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 9 more
#VU22908 - Improper input validation
CVE-2019-12523
CWE-20 Medium
No
No
4.9 22.11.2019 SB2019110710
SB2019112201
SB2019112202
and 9 more
#VU22589 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18679
CWE-200 Low
No
No
4.9 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 9 more
#VU22587 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-18678
CWE-444 Medium
No
No
4.9 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 8 more
#VU22585 - Heap-based Buffer Overflow
CVE-2019-12526
CWE-122 High
No
No
4.9 07.11.2019 SB2019110709
SB2019110710
SB2019112201
and 9 more
#VU10383 - NULL Pointer Dereference
CVE-2018-1000024
CWE-476 Medium
No
No
3.5.28, 4.0.23 06.02.2018 SB2018012312
SB2018020610
SB2018022305
and 7 more
#VU10164 - NULL Pointer Dereference
CVE-2018-1000027
CWE-476 Medium
No
No
- 23.01.2018 SB2018012312
SB2022121201
SB2018012336
and 1 more
#VU32273 - Improper input validation
CVE-2016-4556
CWE-20 Medium
No
No
3.5.18 10.05.2016 SB2016051019
SB2016072906
#VU32272 - Improper input validation
CVE-2016-4555
CWE-20 Medium
No
No
3.5.18 10.05.2016 SB2016051018
SB2016072905
#VU32300 - Memory corruption
CVE-2016-4054
CWE-119 High
No
No
3.5.17 25.04.2016 SB2016042504
SB2016050939


Showing elements 21 - 40 out of 49