The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0740 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ CentOS Bridge 7.9. It addresses 7 CVEs:
    CVE-2021-28651, CVE-2021-31807, CVE-2021-28652, CVE-2021-31806, CVE-2024-45802, and 2 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0495 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 9.2. It addresses 25 CVEs:
    CVE-2024-45802, CVE-2024-23638, CVE-2013-0189, CVE-2013-1839, CVE-2019-12528, and 20 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1490 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 9.6. It addresses 30 CVEs:
    CVE-2024-45802, CVE-2024-37894, CVE-2021-46784, CVE-2022-41318, CVE-2023-49286, and 25 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9644 advisory.

    - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to       a Denial of Service attack against Cache Manager error responses
    - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial of Service       processing ESI response content

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the squid package has been released.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0721 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-45802:
    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input     Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after     Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all     clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0888 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2024-23638:
    Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6     is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a     trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid     older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and     including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by     Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in     Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access     control: http_access deny manager.

    CVE-2024-45802:
    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input     Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after     Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all     clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1738693764 advisory.

  - Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable     to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This     problem allows a remote attacker to cause Denial of Service when sending a crafted, chunked, encoded HTTP     Message. This bug is fixed in Squid version 6.8. In addition, patches addressing this problem for the     stable releases can be found in Squid's patch archives. There is no workaround for this issue.
    (CVE-2024-25111)

  - Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input     Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after     Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all     clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.
    (CVE-2024-45802)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
357098	CentOS Linux 7.9 [CIQ] Security Update: squid / squid-debuginfo / squid-migration-script / squid-sysvinit Multiple Vulnerabilities (ciqsa-2026_0740)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/2	high
355986	Rocky Linux 9.2 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_0495)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
354425	Rocky Linux 9.6 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_1490)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
211386	Oracle Linux 8 : squid (ELSA-2024-9644)	Nessus	Oracle Linux Local Security Checks	2024/11/15	2026/4/30	high
213605	Photon OS 3.0: Squid PHSA-2024-3.0-0809	Nessus	PhotonOS Local Security Checks	2025/1/9	2026/4/30	high
239714	TencentOS Server 4: squid (TSSA-2024:0721)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
239931	TencentOS Server 3: squid:4 (TSSA-2024:0888)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	high
362197	AlmaLinux 9.2 [TuxCare] Security Update: squid Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1738693764)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high
213450	Photon OS 5.0: Squid PHSA-2024-5.0-0429	Nessus	PhotonOS Local Security Checks	2025/1/1	2026/10/14	high
333685	Photon OS 5.0: Squid PHSA-2024-5.0-91-0429	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	high

検出

プラグインの検索

high

critical

critical

high

high

high

high

high

high

high