https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:11:13 +0000 https://vulnerability.circl.lu/vuln/cve-2022-41317 <p>An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.</p> <p>An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.</p> https://vulnerability.circl.lu/vuln/cve-2022-41317 https://vulnerability.circl.lu/vuln/usn-5641-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid, Ubuntu:22.04:LTS: squid</p> <p>Mikhail Evdokimov discovered that Squid incorrectly handled cache manager ACLs. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-41317)</p> <p>It was discovered that Squid incorrectly handled SSPI and SMB authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2022-41318)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid, Ubuntu:22.04:LTS: squid</p> <p>Mikhail Evdokimov discovered that Squid incorrectly handled cache manager ACLs. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-41317)</p> <p>It was discovered that Squid incorrectly handled SSPI and SMB authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2022-41318)</p> https://vulnerability.circl.lu/vuln/usn-5641-1