CVE-2014-9749

Published: Nov 6, 2015Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."

Affected (17)

Products: Squid Cache: Squid · Opensuse: Opensuse

1 product

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Squid Cache Squid	Version 3.4.10
Squid Cache Squid	Version 3.4.11
Squid Cache Squid	Version 3.4.12
Squid Cache Squid	Version 3.4.13
Squid Cache Squid	Version 3.4.4
Squid Cache Squid	Version 3.4.5
Squid Cache Squid	Version 3.4.6
Squid Cache Squid	Version 3.4.7
Squid Cache Squid	Version 3.4.8
Squid Cache Squid	Version 3.4.9
Squid Cache Squid	Version 3.5.0.1
Squid Cache Squid	Version 3.5.0.2
Squid Cache Squid	Version 3.5.0.3
Squid Cache Squid	Version 3.5.0.4
Squid Cache Squid	Version 3.5.1