The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0262 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 8.6. It addresses 50 CVEs:
    CVE-2019-12520, CVE-2019-12524, CVE-2013-1839, CVE-2021-28116, CVE-2019-12529, and 45 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2014-3609

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Squid3 was updated to fix a denial of service in Range Header processing, which would have allowed proxy users to crash the squid proxy process. (CVE-2014-3609)

This update fixes the following security issues and bugs with squid :

A denial of Service in Range header processing was fixed that could be used by proxy users to crash squid. (CVE-2014-3609)

Also the following bugs were fixed :

  - bnc#894840: removed unnecessary 'sharedscripts' in     squid's logrotate snippet

  - bnc#894636: fixes run of init script when logrotate is     called

An updated squid package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid. (CVE-2014-3609)

A buffer overflow flaw was found in Squid's DNS lookup module. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid. (CVE-2013-4115)

Red Hat would like to thank the Squid project for reporting the CVE-2014-3609 issue. Upstream acknowledges Matthew Daley as the original reporter.

All Squid users are advised to upgrade to this updated package, which contains backported patches to correct these issues. After installing this update, the squid service will be restarted automatically.

A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid. (CVE-2014-3609)

A buffer overflow flaw was found in Squid's DNS lookup module. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid. (CVE-2013-4115)

After installing this update, the squid service will be restarted automatically.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1490 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 9.6. It addresses 30 CVEs:
    CVE-2024-45802, CVE-2024-37894, CVE-2021-46784, CVE-2022-41318, CVE-2023-49286, and 25 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0495 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 9.2. It addresses 25 CVEs:
    CVE-2024-45802, CVE-2024-23638, CVE-2013-0189, CVE-2013-1839, CVE-2019-12528, and 20 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
356925	Rocky Linux 8.6 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_0262)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	critical
77617	Fedora 19 : squid-3.3.13-1.fc19 (2014-9963)	Nessus	Fedora Local Security Checks	2014/9/11	2021/1/11	medium
77743	SuSE 11.3 Security Update : squid3 (SAT Patch Number 9729)	Nessus	SuSE Local Security Checks	2014/9/18	2021/1/19	medium
77777	openSUSE Security Update : squid (openSUSE-SU-2014:1144-1)	Nessus	SuSE Local Security Checks	2014/9/22	2021/1/19	medium
77523	RHEL 5 / 6 : squid (RHSA-2014:1148)	Nessus	Red Hat Local Security Checks	2014/9/4	2021/1/14	high
77553	Scientific Linux Security Update : squid on SL5.x, SL6.x i386/x86_64 (20140903)	Nessus	Scientific Linux Local Security Checks	2014/9/5	2021/1/14	high
77559	Fedora 20 : squid-3.3.13-1.fc20 (2014-9948)	Nessus	Fedora Local Security Checks	2014/9/8	2021/1/11	medium
354425	Rocky Linux 9.6 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_1490)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
355986	Rocky Linux 9.2 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_0495)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical

检测

插件搜索

critical

medium

medium

medium

high

high

medium

critical

critical