CVE catalog

CVE-2021-41611

squid: CVE-2021-41611

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.95% · Oct 25, 2026

An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server to obtain security trust well improperly. This indication of trust may be passed along to clients, allowing access to unsafe or hijacked services.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansquidsid7.7-1fixed
Debiansquidforky7.7-1fixed
Debiansquidtrixie6.13-2+deb13u3fixed
Debiansquidtrixie-security6.13-2+deb13u2fixed
Debiansquidbookworm5.7-2+deb12u5fixed
Debiansquidbookworm-security5.7-2+deb12u6fixed
Alpinesquid3.135.0.6-r2fixed
Alpinesquid3.145.0.6-r2fixed
Alpinesquid3.155.2-r0fixed
Alpinesquid3.165.2-r0fixed
Alpinesquid3.175.2-r0fixed
Alpinesquid3.185.2-r0fixed
Alpinesquid3.195.2-r0fixed
Alpinesquid3.205.2-r0fixed
Alpinesquid3.215.2-r0fixed
Alpinesquid3.225.2-r0fixed
Alpinesquid3.235.2-r0fixed
Alpinesquid3.245.2-r0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansquidsourcesid5.2-1not yet assignedNot reportedNot reported
Debiansquidsourceforky5.2-1not yet assignedNot reportedNot reported
Debiansquidsourcetrixie5.2-1not yet assignedNot reportedNot reported
Debiansquidsourcebookworm5.2-1not yet assignedNot reportedNot reported
Alpinesquidapk3.135.0.6-r2Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.145.0.6-r2Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.155.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.165.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.175.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.185.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.195.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.205.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.215.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.225.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.235.2-r0Not reportedALPINE-CVE-2021-41611Not reported
Alpinesquidapk3.245.2-r0Not reportedALPINE-CVE-2021-41611Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [squid]Unknown
    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-cgi]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squidclient]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-common]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · all · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · all · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · all · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · all · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-openssl]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-purge]Unknown

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

[Debian 13 (Trixie)]

  • [squid]Unknown
    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

  • [squid-cgi]Unknown

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

  • [squidclient]Unknown

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

  • [squid-common]Unknown

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · all · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · all · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · all · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · all · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

  • [squid-openssl]Unknown

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

  • [squid-purge]Unknown

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 5.2-1

      dsa · squid · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]