Skip to content
fr Sign in
6.9 Medium

CVE-2026-33515 Squid is a caching proxy for the Web

Description

Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.

Affected products and versions

Product Affected versions Fixed in
squid 7.5 earliest → < 7.5 7.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of squid

The 19 CVEs of squid →
CVE-2026-61642 Squid is a caching proxy for the Web 7.7 High CVE-2026-47729 Squid is a caching proxy for the Web 6.5 Medium CVE-2026-50012 Squid is a caching proxy for the Web 5.5 Medium CVE-2026-33526 Squid is a caching proxy for the Web 9.2 Critical
Track this CVE