Joshua Rogers discovered that Squid incorrectly handled requests with the urn: scheme. A remote attacker could possibly use this issue to cause Squid to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2021-28651)
It was discovered that Squid incorrectly handled SSPI and SMB authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-41318)
Joshua Rogers discovered that Squid incorrectly handled HTTP message processing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49285)
Joshua Rogers discovered that Squid incorrectly handled Helper process management. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49286)
Joshua Rogers discovered that Squid incorrectly handled HTTP request parsing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-50269, CVE-2024-25617)
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "squid": "3.5.12-1ubuntu7.16+esm3", "squid-dbg": "3.5.12-1ubuntu7.16+esm3", "squid-common": "3.5.12-1ubuntu7.16+esm3", "squid-cgi": "3.5.12-1ubuntu7.16+esm3", "squidclient": "3.5.12-1ubuntu7.16+esm3", "squid-purge": "3.5.12-1ubuntu7.16+esm3", "squid-cgi-dbgsym": "3.5.12-1ubuntu7.16+esm3", "squid3": "3.5.12-1ubuntu7.16+esm3", "squidclient-dbgsym": "3.5.12-1ubuntu7.16+esm3", "squid-dbgsym": "3.5.12-1ubuntu7.16+esm3", "squid-purge-dbgsym": "3.5.12-1ubuntu7.16+esm3" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "squid": "3.5.27-1ubuntu1.14+esm2", "squid-dbg": "3.5.27-1ubuntu1.14+esm2", "squid-common": "3.5.27-1ubuntu1.14+esm2", "squid-cgi": "3.5.27-1ubuntu1.14+esm2", "squidclient": "3.5.27-1ubuntu1.14+esm2", "squid-purge": "3.5.27-1ubuntu1.14+esm2", "squid3": "3.5.27-1ubuntu1.14+esm2" } ] }