Squid mishandles HTTP Transfer-Encoding headers, enabling request smuggling (USN-8998-1)
Squid incorrectly handles certain HTTP Transfer-Encoding headers, allowing HTTP request smuggling, bypassing security mechanisms, or poisoning web caches.
Stories per day · 30 days
Relatedoff-topic3request-smuggling2belemnite1blog1blogging1cache-poisoning1denial-of-service1fossil1http1jurassic1nature1schneier1ubuntu1
2 stories, newest first · one card per story
Stories tagged #squid
Ubuntu Squid flaws allow request smuggling and cache crashes
CVE-2026-61642 can smuggle requests or poison caches; a separate digest bug crashes older Ubuntu releases.