Vulnerabilities > Squid Cache > Squid > 3.3.0.1

DATE CVE VULNERABILITY TITLE RISK
2014-11-26 CVE-2014-7142 Improper Input Validation vulnerability in multiple products
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
network
low complexity
oracle canonical squid-cache CWE-20
6.4
2014-11-26 CVE-2014-7141 Data Processing Errors vulnerability in Squid-Cache Squid
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
network
low complexity
squid-cache CWE-19
6.4