The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:10257 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)

    * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c0590bd498 advisory.

    - new version 7.5
    - security update

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is     vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to     perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol.
    This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero     `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. Version     7.5 contains a patch. (CVE-2026-33526)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:8119 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)

    * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8317 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)

    * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:10255 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)

    * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6a4814a4d advisory.

    - new version 7.5
    - security update

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0280 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2026-32748:
    Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during     expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP     traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service     attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that     explicitly enable ICP support (i.e. configure non-zero icp_port). This problem _cannot_ be mitigated by     denying ICP queries using icp_access rules. This bug is fixed in Squid version 7.5.

    CVE-2026-33526:
    Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is     vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to     perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol.
    This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero     icp_port). This problem _cannot_ be mitigated by denying ICP queries using icp_access rules. Version 7.5     contains a patch.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
310036	RHEL 9 : squid (RHSA-2026:10257)	Nessus	Red Hat Local Security Checks	2026/4/23	2026/4/23	critical
312321	Fedora 44 : squid (2026-c0590bd498)	Nessus	Fedora Local Security Checks	2026/5/5	2026/5/5	critical
303680	Linux Distros Unpatched Vulnerability : CVE-2026-33526	Nessus	Misc.	2026/3/25	2026/4/21	critical
306404	RHEL 10 : squid (RHSA-2026:8119)	Nessus	Red Hat Local Security Checks	2026/4/14	2026/4/14	critical
306645	RHEL 8 : squid:4 (RHSA-2026:8317)	Nessus	Red Hat Local Security Checks	2026/4/16	2026/4/16	critical
310425	RHEL 9 : squid (RHSA-2026:10255)	Nessus	Red Hat Local Security Checks	2026/4/27	2026/4/27	critical
312668	Fedora 43 : squid (2026-e6a4814a4d)	Nessus	Fedora Local Security Checks	2026/5/6	2026/5/6	critical
313019	TencentOS Server 2: squid (TSSA-2026:0280)	Nessus	Tencent Local Security Checks	2026/5/7	2026/5/7	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical