squid3 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the squid3 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M CVE-2024-37894	<3.5.27-1ubuntu1.14+esm3
M Reachable Assertion	<3.5.27-1ubuntu1.14+esm2
M Out-of-bounds Read	<3.5.27-1ubuntu1.14+esm2
M Uncontrolled Recursion	<3.5.27-1ubuntu1.14+esm2
M CVE-2024-25617	<3.5.27-1ubuntu1.14+esm2
M Use After Free	*
M NULL Pointer Dereference	<3.5.27-1ubuntu1.14+esm1
M Buffer Overflow	<3.5.27-1ubuntu1.14+esm1
M Improper Handling of Exceptional Conditions	*
M Integer Overflow or Wraparound	<3.5.27-1ubuntu1.14
M Reachable Assertion	<3.5.27-1ubuntu1.13
M Improper Input Validation	<3.5.27-1ubuntu1.11
M Memory Leak	<3.5.27-1ubuntu1.11
L Memory Leak	<3.5.27-1ubuntu1.11
M Integer Overflow or Wraparound	<3.5.27-1ubuntu1.11
M Improper Input Validation	<3.5.27-1ubuntu1.11
M Improper Encoding or Escaping of Output	<3.5.27-1ubuntu1.11
M Out-of-bounds Read	<3.5.27-1ubuntu1.12
M Improper Input Validation	<3.5.27-1ubuntu1.10
M Improper Input Validation	<3.5.27-1ubuntu1.9
M HTTP Request Smuggling	<3.5.27-1ubuntu1.9
L HTTP Request Smuggling	<3.5.27-1ubuntu1.9
L Improper Privilege Management	*
L HTTP Request Smuggling	<3.5.27-1ubuntu1.9
M Out-of-bounds Write	<3.5.27-1ubuntu1.6
M Out-of-bounds Write	<3.5.27-1ubuntu1.6
M Integer Overflow or Wraparound	<3.5.27-1ubuntu1.6
M Improper Input Validation	<3.5.27-1ubuntu1.7
M Missing Authentication for Critical Function	<3.5.27-1ubuntu1.7
L Arbitrary Code Injection	<3.5.27-1ubuntu1.6
M Improper Input Validation	<3.5.27-1ubuntu1.5
M Information Exposure	<3.5.27-1ubuntu1.5
M Exposure of Resource to Wrong Sphere	<3.5.27-1ubuntu1.5
M Out-of-Bounds	<3.5.27-1ubuntu1.5
M Out-of-bounds Write	<3.5.27-1ubuntu1.7
M CVE-2019-12523	<3.5.27-1ubuntu1.7
M Buffer Overflow	<3.5.27-1ubuntu1.4
M Information Exposure	<3.5.27-1ubuntu1.4
M HTTP Request Smuggling	<3.5.27-1ubuntu1.4
M Cross-site Request Forgery (CSRF)	<3.5.27-1ubuntu1.4
M Cross-site Scripting (XSS)	<3.5.27-1ubuntu1.2
M Information Exposure	<3.5.27-1ubuntu1.3
M Out-of-Bounds	<3.5.27-1ubuntu1.3
L Missing Release of Resource after Effective Lifetime	<3.5.27-1ubuntu1.2
L NULL Pointer Dereference	<3.5.23-5ubuntu2
L CVE-2018-1000024	<3.5.23-5ubuntu2

Vulnerability

Vulnerable Version

CVE-2024-37894

<3.5.27-1ubuntu1.14+esm3