The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6bbab8aa8 advisory.

    - new version 7.6

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1784730197 advisory.

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness     of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read:
    when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename,     parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server     through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed     in version 7.6. (CVE-2026-47729)

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache     digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based     buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the     digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can     trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests     option and configured with cache_peer entries. This issue is fixed in version 7.6. (CVE-2026-50012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785147682 advisory.

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness     of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read:
    when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename,     parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server     through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed     in version 7.6. (CVE-2026-47729)

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache     digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based     buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the     digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can     trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests     option and configured with cache_peer entries. This issue is fixed in version 7.6. (CVE-2026-50012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4621-1 advisory.

    - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).
    - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).
    - CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).
    - CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of     syntactic       correctness of input (bsc#1268272).
    - CVE-2026-50012: Improper Input Validation bug (bsc#1268320).

    Changes for squid:

    - Do not leak HttpReply when checking http_reply_access (bsc#1237027)
    - Updated to version 6.14

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784713308 advisory.

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness     of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read:
    when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename,     parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server     through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed     in version 7.6. (CVE-2026-47729)

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache     digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based     buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the     digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can     trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests     option and configured with cache_peer entries. This issue is fixed in version 7.6. (CVE-2026-50012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786353802 advisory.

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness     of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read:
    when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename,     parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server     through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed     in version 7.6. (CVE-2026-47729)

  - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache     digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based     buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the     digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can     trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests     option and configured with cache_peer entries. This issue is fixed in version 7.6. (CVE-2026-50012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
330824	Fedora 44 : squid (2026-e6bbab8aa8)	Nessus	Fedora Local Security Checks	2026/7/30	2026/7/30	medium
353166	CentOS Linux 6 [TuxCare] Security Update: squid Multiple Vulnerabilities (CENTOS6:CLSA-2026:1784730197)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	medium
362063	AlmaLinux 9.2 [TuxCare] Security Update: squid Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785147682)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
365328	SUSE SLES15 Security Update : squid (SUSE-SU-2026:4621-1)	Nessus	SuSE Local Security Checks	2026/10/13	2026/10/13	critical
360446	CentOS Linux 8.4 [TuxCare] Security Update: squid Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1784713308)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	medium
362348	CentOS Linux 7 [TuxCare] Security Update: squid / squid-migration-script / squid-sysvinit Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786353802)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	medium

检测

插件搜索

medium

medium

medium

critical

medium

medium