Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era
Source Reddit Cybersecurity
Mentions 1 CVE : update to 7.6
Mentioned vulnerabilities
Discussion
A 29-year-old memory leak vulnerability named Squidbleed was discovered in the Squid open-source caching proxy server. The flaw leaks internal memory, including plaintext HTTP requests and sensitive data such as credentials and session tokens, when Squid handles cleartext HTTP traffic and connects to an attacker-controlled FTP server. The vulnerability stems from a 1997 code commit related to FTP directory listing parsing and was fixed in Squid version 7.6 released in June 2026. Disabling FTP support in Squid is recommended to eliminate the attack surface.
r/cybersecurity (opens in a new tab)u/Much_Preparation_8320 points0 comments
Twenty-nine years old! I maintain that while LLMs are going to make zero-days more common, in the long run they'll lead to better security - better to know about the flaws and fix them than to have them linger. Security by obscurity - never works!