This update fixes the following security issues and bugs with squid :

A denial of Service in Range header processing was fixed that could be used by proxy users to crash squid. (CVE-2014-3609)

Also the following bugs were fixed :

  - bnc#894840: removed unnecessary 'sharedscripts' in     squid's logrotate snippet

  - bnc#894636: fixes run of init script when logrotate is     called

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1490 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 9.6. It addresses 30 CVEs:
    CVE-2024-45802, CVE-2024-37894, CVE-2021-46784, CVE-2022-41318, CVE-2023-49286, and 25 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0495 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 9.2. It addresses 25 CVEs:
    CVE-2024-45802, CVE-2024-23638, CVE-2013-0189, CVE-2013-1839, CVE-2019-12528, and 20 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid. (CVE-2014-3609)

Red Hat would like to thank the Squid project for reporting this issue. Upstream acknowledges Matthew Daley as the original reporter.

All Squid users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, the squid service will be restarted automatically.

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-1148 advisory.

    - Resolves: #1134936 - CVE-2013-4115 buffer overflow when processing overly long DNS names

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2014-3609: Denial of Service in Range header processing.

Ignore Range headers with unidentifiable byte-range values. If squid is unable to determine the byte value for ranges, treat the header as invalid.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated squid packages fix security vulnerabilities :

Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled (CVE-2014-0128).

Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a denial of service (CVE-2014-3609).

Due to incorrect buffer management Squid can be caused by an attacker to write outside its allocated SNMP buffer (CVE-2014-6270).

Due to incorrect bounds checking Squid pinger binary is vulnerable to denial of service or information leak attack when processing larger than normal ICMP or ICMPv6 packets (CVE-2014-7141).

Due to incorrect input validation Squid pinger binary is vulnerable to denial of service or information leak attacks when processing ICMP or ICMPv6 packets (CVE-2014-7142).

Matthew Daley discovered that squid, a web proxy cache, does not properly perform input validation when parsing requests. A remote attacker could use this flaw to mount a denial of service attack, by sending specially crafted Range requests.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
77777	openSUSE Security Update : squid (openSUSE-SU-2014:1144-1)	Nessus	SuSE Local Security Checks	2014/9/22	2021/1/19	medium
354425	Rocky Linux 9.6 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_1490)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
355986	Rocky Linux 9.2 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_0495)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
77508	CentOS 7 : squid (CESA-2014:1147)	Nessus	CentOS Local Security Checks	2014/9/4	2021/1/4	medium
77517	Oracle Linux 5 / 6 : squid (ELSA-2014-1148)	Nessus	Oracle Linux Local Security Checks	2014/9/4	2024/10/22	high
77522	RHEL 7 : squid (RHSA-2014:1147)	Nessus	Red Hat Local Security Checks	2014/9/4	2021/1/14	medium
82192	Debian DLA-45-1 : squid3 security update	Nessus	Debian Local Security Checks	2015/3/26	2021/1/11	medium
82356	Mandriva Linux Security Advisory : squid (MDVSA-2015:103)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/14	medium
81006	Debian DSA-3139-1 : squid - security update	Nessus	Debian Local Security Checks	2015/1/27	2021/1/11	medium

検出

プラグインの検索

medium

critical

critical

medium

high

medium

medium

medium

medium