squid | Snyk

Direct Vulnerabilities

Known vulnerabilities in the squid package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Heap-based Buffer Overflow	*
M Out-of-bounds Read	*
H Expired Pointer Dereference	*
M Out-of-bounds Read	*
H Premature Release of Resource During Expected Lifetime	*
H Information Exposure	*
M Stack-based Buffer Overflow	*
H Heap-based Buffer Overflow	*
H Premature Release of Resource During Expected Lifetime	*
M Out-of-bounds Write	*
H Collapse of Data into Unsafe Value	*
M Expired Pointer Dereference	*
H Uncontrolled Recursion	*
M Use After Free	*
H Buffer Over-read	*
H Incorrect Check of Function Return Value	*
H NULL Pointer Dereference	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
H HTTP Request Smuggling	*
H Improper Handling of Exceptional Conditions	*
H Buffer Over-read	*
H Reachable Assertion	*
L Access Restriction Bypass	*
M Heap-based Buffer Overflow	<7:3.1.23-16.el6_8.6
H Out-of-Bounds	<7:3.1.10-22.el6_5
M Improper Input Validation	<7:3.1.10-20.el6_5.3
M Information Exposure	*
M Memory Leak	<7:3.1.10-16.el6
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Heap-based Buffer Overflow	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Resource Management Errors	<7:3.1.10-1.el6_2.1
M CVE-2011-3205	<7:3.1.10-1.el6_1.1
L CVE-2010-3072	<7:3.1.10-1.el6
H Reachable Assertion	<7:3.1.10-22.el6_5
M Improper Input Validation	*
M Out-of-Bounds	*
M Improper Input Validation	*
H HTTP Request Smuggling	*
H HTTP Request Smuggling	*
H HTTP Request Smuggling	*
M HTTP Request Smuggling	*
H Improper Access Control	*
M Use of Potentially Dangerous Function	*
H Stack-based Buffer Overflow	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Incorrect Calculation of Buffer Size	*
M Information Exposure	*
M Improper Input Validation	*
M Out-of-Bounds	*
M Improper Input Validation	*
M Improper Input Validation	*
M Out-of-Bounds	*
M Improper Input Validation	*
M Heap-based Buffer Overflow	*
M Improper Output Neutralization for Logs	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
L NULL Pointer Dereference	*
M Improper Input Validation	*
M Integer Overflow or Wraparound	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Memory Leak	*
M Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Improper Handling of Syntactically Invalid Structure	*
M Reachable Assertion	*
M Reachable Assertion	*
M Reachable Assertion	*
M Improper Handling of Syntactically Invalid Structure	*
L HTTP Request Smuggling	*
L Incorrect Privilege Assignment	*
M Access Restriction Bypass	*
L CVE-2010-2951	*
M Off-by-one Error	*
L Access Restriction Bypass	*

Vulnerability

Vulnerable Version

Heap-based Buffer Overflow