CVE-2014-9749: Opensuse

Medium severity, CVSS 4.0. EPSS: 11.4% chance of exploitation in the next 30 days.

Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."

Affected products

• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Squid-Cache Squid: version 3.4.4 only; version 3.4.5 only; version 3.4.6 only; version 3.4.7 only; version 3.4.8 only; version 3.4.9 only; …

Published 2015-11-06. Last modified 2026-06-17.