CVE-2021-46784: Debian Linux

Medium severity, CVSS 6.5. EPSS: 5.1% chance of exploitation in the next 30 days.

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only; version 12.0 only
• Squid-Cache Squid: from 3.0, up to and including 3.5.28; from 4.0, up to and including 4.17; from 5.0, before 5.6 (fixed in 5.6)

Published 2022-07-17. Last modified 2026-06-17.