CVE-2026-47729

Name
CVE-2026-47729
Description
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
security-advisories@github.com https://github.com/squid-cache/squid/commit/865a131c7d557e68c965043d98c2eccae26deef8
security-advisories@github.com https://github.com/squid-cache/squid/pull/2408
security-advisories@github.com https://github.com/squid-cache/squid/pull/2409
security-advisories@github.com https://github.com/squid-cache/squid/releases/tag/SQUID_7_6
security-advisories@github.com https://github.com/squid-cache/squid/security/advisories/GHSA-8c37-pxjq-qwrg

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:* squid >= None < 7.6

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
squid edge-main 7.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
squid edge-main 7.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 7.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 7.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 6.12-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 6.12-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 6.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 6.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 6.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 6.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 5.7-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 5.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 5.0.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 5.0.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid edge-main 4.13.0-r0 None possibly vulnerable
squid edge-main 4.12.0-r0 None possibly vulnerable
squid edge-main 4.10-r0 None possibly vulnerable
squid edge-main 4.9-r0 None possibly vulnerable
squid edge-main 4.8-r0 None possibly vulnerable
squid edge-main 3.5.27-r2 None possibly vulnerable
squid 3.24-main 7.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
squid 3.24-main 7.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.23-main 7.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
squid 3.23-main 7.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.23-main 7.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.22-main 6.12-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.22-main 6.6-r0 None possibly vulnerable
squid 3.22-main 6.5-r0 None possibly vulnerable
squid 3.22-main 6.4-r0 None possibly vulnerable
squid 3.22-main 6.1-r0 None possibly vulnerable
squid 3.22-main 5.7-r0 None possibly vulnerable
squid 3.22-main 5.2-r0 None possibly vulnerable
squid 3.22-main 5.0.6-r0 None possibly vulnerable
squid 3.22-main 5.0.5-r0 None possibly vulnerable
squid 3.22-main 4.13.0-r0 None possibly vulnerable
squid 3.22-main 4.12.0-r0 None possibly vulnerable
squid 3.22-main 4.10-r0 None possibly vulnerable
squid 3.22-main 4.9-r0 None possibly vulnerable
squid 3.22-main 4.8-r0 None possibly vulnerable
squid 3.22-main 3.5.27-r2 None possibly vulnerable
squid 3.21-main 6.12-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.21-main 6.6-r0 None possibly vulnerable
squid 3.21-main 6.5-r0 None possibly vulnerable
squid 3.21-main 6.4-r0 None possibly vulnerable
squid 3.21-main 6.1-r0 None possibly vulnerable
squid 3.21-main 5.7-r0 None possibly vulnerable
squid 3.21-main 5.2-r0 None possibly vulnerable
squid 3.21-main 5.0.6-r0 None possibly vulnerable
squid 3.21-main 5.0.5-r0 None possibly vulnerable
squid 3.21-main 4.13.0-r0 None possibly vulnerable
squid 3.21-main 4.12.0-r0 None possibly vulnerable
squid 3.21-main 4.10-r0 None possibly vulnerable
squid 3.21-main 4.9-r0 None possibly vulnerable
squid 3.21-main 4.8-r0 None possibly vulnerable
squid 3.21-main 3.5.27-r2 None possibly vulnerable
squid 3.20-main 6.9-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.20-main 6.6-r0 None possibly vulnerable
squid 3.20-main 6.5-r0 None possibly vulnerable
squid 3.20-main 6.4-r0 None possibly vulnerable
squid 3.20-main 6.1-r0 None possibly vulnerable
squid 3.20-main 5.7-r0 None possibly vulnerable
squid 3.20-main 5.2-r0 None possibly vulnerable
squid 3.20-main 5.0.6-r0 None possibly vulnerable
squid 3.20-main 5.0.5-r0 None possibly vulnerable
squid 3.20-main 4.13.0-r0 None possibly vulnerable
squid 3.20-main 4.12.0-r0 None possibly vulnerable
squid 3.20-main 4.10-r0 None possibly vulnerable
squid 3.20-main 4.9-r0 None possibly vulnerable
squid 3.20-main 4.8-r0 None possibly vulnerable
squid 3.20-main 3.5.27-r2 None possibly vulnerable
squid 3.19-main 6.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.19-main 6.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
squid 3.19-main 6.4-r0 None possibly vulnerable
squid 3.19-main 6.1-r0 None possibly vulnerable
squid 3.19-main 5.7-r0 None possibly vulnerable
squid 3.19-main 5.2-r0 None possibly vulnerable
squid 3.19-main 5.0.6-r0 None possibly vulnerable
squid 3.19-main 5.0.5-r0 None possibly vulnerable
squid 3.19-main 4.13.0-r0 None possibly vulnerable
squid 3.19-main 4.12.0-r0 None possibly vulnerable
squid 3.19-main 4.10-r0 None possibly vulnerable
squid 3.19-main 4.9-r0 None possibly vulnerable
squid 3.19-main 4.8-r0 None possibly vulnerable
squid 3.19-main 3.5.27-r2 None possibly vulnerable