squid vulnerabilities

Known vulnerabilities in the squid package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Improper Input Validation	*
M Out-of-bounds Write	*
H Collapse of Data into Unsafe Value	*
M Expired Pointer Dereference	*
H Uncontrolled Recursion	*
M Use After Free	*
H Buffer Over-read	*
H Incorrect Check of Function Return Value	*
H NULL Pointer Dereference	*
H Out-of-bounds Read	*
H HTTP Request Smuggling	*
H Improper Handling of Exceptional Conditions	*
H Buffer Over-read	*
H Reachable Assertion	*
L Access Restriction Bypass	*
M Heap-based Buffer Overflow	<7:3.1.23-16.el6_8.6
H Out-of-Bounds	<7:3.1.10-22.el6_5
M Improper Input Validation	<7:3.1.10-20.el6_5.3
M Information Exposure	*
M Memory Leak	<7:3.1.10-16.el6
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Heap-based Buffer Overflow	<7:3.1.23-16.el6_8.4
M Improper Input Validation	<7:3.1.23-16.el6_8.4
M Resource Management Errors	<7:3.1.10-1.el6_2.1
M CVE-2011-3205	<7:3.1.10-1.el6_1.1
L CVE-2010-3072	<7:3.1.10-1.el6
H Improper Handling of Syntactically Invalid Structure	<7:3.1.10-22.el6_5
M Improper Input Validation	*
M Out-of-Bounds	*
M Improper Input Validation	*
H HTTP Request Smuggling	*
H HTTP Request Smuggling	*
H HTTP Request Smuggling	*
M HTTP Request Smuggling	*
H Improper Access Control	*
M Use of Potentially Dangerous Function	*
H Stack-based Buffer Overflow	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Information Exposure	*
M Improper Input Validation	*
M Out-of-Bounds	*
M Improper Input Validation	*
M Improper Input Validation	*
M Out-of-Bounds	*
M Improper Input Validation	*
M Heap-based Buffer Overflow	*
M Improper Output Neutralization for Logs	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
L NULL Pointer Dereference	*
M Improper Input Validation	*
M Integer Overflow or Wraparound	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Memory Leak	*
M Memory Leak	*
M Out-of-bounds Read	*
M Improper Handling of Syntactically Invalid Structure	*
M Reachable Assertion	*
M Reachable Assertion	*
M Reachable Assertion	*
M Improper Handling of Syntactically Invalid Structure	*
L Information Exposure	*
L Incorrect Privilege Assignment	*
M Access Restriction Bypass	*
L CVE-2010-2951	*
M Off-by-one Error	*
L Access Restriction Bypass	*

Vulnerability

Vulnerable Version

Improper Input Validation