squid (SUSE:Linux Enterprise Server 12 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP3 package squid, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2018-1000024 — CVSS 7.5 (high): The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling…
• CVE-2018-1000027 — CVSS 7.5 (high): The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in…
• CVE-2018-19131 — CVSS 6.1 (medium): Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
• CVE-2018-1172 — CVSS 5.9 (medium): This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid…
• CVE-2018-19132 — CVSS 5.9 (medium): Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.