Squid 漏洞

时间轴

类型

产品

Squid Proxy99
Squid Web Proxy47
Squid proxy1
Squid HTTP Proxy1

修正

Official Fix127
Temporary Fix0
Workaround3
Unavailable0
Not Defined18

易受攻击性

High2
Functional0
Proof-of-Concept29
Unproven16
Not Defined101

访问向量

Not Defined0
Physical0
Local1
Adjacent3
Network144

身份验证

Not Defined0
High0
Low13
None135

用户交互

Not Defined0
Required13
None135

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤44
≤57
≤643
≤724
≤852
≤916
≤101

CVSSv3 Temp

≤10
≤20
≤31
≤45
≤520
≤635
≤748
≤827
≤911
≤101

VulDB

≤10
≤20
≤31
≤49
≤59
≤654
≤78
≤855
≤911
≤101

NVD

≤10
≤20
≤30
≤41
≤50
≤66
≤79
≤828
≤99
≤108

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤81
≤96
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k8
<10k50
<25k80
<50k10
<100k0
≥100k0

本日攻击

<1k123
<2k2
<5k8
<10k10
<25k5
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (4): HTTP Proxy (1), Proxy (99), Web Proxy (47), proxy (1)

Link to Vendor Website: http://www.squid-cache.org/

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2024-03-066.96.8Squid Web Proxy HTTP Chunked Decoder 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.000430.07CVE-2024-25111
2024-02-155.35.2Squid Web Proxy HTTP Header Parser 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-25617
2024-01-245.45.3Squid Web Proxy Cache Manager Error Response 内存损坏Firewall SoftwareNot DefinedOfficial Fix0.008120.04CVE-2024-23638
2023-12-147.17.1Squid Web Proxy HTTP Request Parser 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.004540.00CVE-2023-50269
2023-12-057.17.1Squid Proxy Collapsed Forwarding 内存损坏Firewall SoftwareNot DefinedOfficial Fix0.003740.00CVE-2023-49288
2023-12-057.17.1Squid Proxy Helper Process Management 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.019400.04CVE-2023-49286
2023-12-057.17.1Squid Proxy HTTP Message 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.014660.04CVE-2023-49285
2023-11-066.46.3Squid Web Proxy Gopher Gateway 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.003740.02CVE-2023-46728
2023-11-017.17.1Squid Web Proxy SSL Certificate Validation 信息公开Firewall SoftwareNot DefinedOfficial Fix0.006100.02CVE-2023-46724
2022-12-265.95.8Squid Web Proxy SSPI/SMB 内存损坏Firewall SoftwareNot DefinedOfficial Fix0.000910.04CVE-2022-41318
2022-12-265.04.9Squid Web Proxy Internal URL 信息公开Firewall SoftwareNot DefinedOfficial Fix0.001050.04CVE-2022-41317
2022-07-185.15.0Squid Web Proxy Gopher Server Response 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.019920.00CVE-2021-46784
2021-10-185.65.4Squid Web Proxy 弱身份验证Firewall SoftwareNot DefinedOfficial Fix0.001190.00CVE-2021-41611
2021-06-094.34.1Squid Web Proxy HTTP Range Request 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.032080.00CVE-2021-31807
2021-05-293.73.6Squid Web Proxy HTTP Response 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.179140.02CVE-2021-33620
2021-05-285.35.1Squid Web Proxy urn Scheme 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.015470.00CVE-2021-28651
2021-05-283.73.6Squid Web Proxy Response Header 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.158920.00CVE-2021-28662
2021-05-283.73.6Squid Web Proxy Cache Manager API 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.003760.00CVE-2021-28652
2021-05-285.35.1Squid Web Proxy Range Request 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.008020.00CVE-2021-31808
2021-05-285.35.1Squid Web Proxy Range Request 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.927140.04CVE-2021-31806
2021-03-197.06.7Squid Web Proxy Config Setting uri_whitespace 权限升级Firewall SoftwareNot DefinedOfficial Fix0.003000.00CVE-2020-25097
2021-03-104.54.5Squid Web Proxy WCCP Protocol 信息公开Firewall SoftwareNot DefinedNot Defined0.040730.03CVE-2021-28116
2020-09-026.46.1Squid Web Proxy Cache 权限升级Firewall SoftwareNot DefinedOfficial Fix0.001510.00CVE-2020-15811
2020-09-026.46.1Squid Web Proxy Header Parsing 权限升级Firewall SoftwareNot DefinedOfficial Fix0.001910.00CVE-2020-15810
2020-08-248.68.2Squid Web Proxy Locking peer_digest.cc peerDigestHandleReply 拒绝服务Firewall SoftwareNot DefinedOfficial Fix0.011890.00CVE-2020-24606

123 更多条目未显示

Do you want to use VulDB in your project?

Use the official API to access entries easily!