PT-2016-5822 · Squid+5 · Squid+6

Yuriy M. Kaminskiy

·

Publicado

2014-05-05

·

Atualizado

2024-06-15

·

CVE-2016-4051

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Squid versions 2.x, 3.x before 3.5.17, and 4.x before 4.0.9
Description A buffer overflow issue exists in the cachemgr.cgi component, potentially allowing remote attackers to cause a denial of service or execute arbitrary code by providing crafted data to seed manager reports.
Recommendations For Squid versions 2.x, update to a version outside of this range to mitigate the issue. For Squid versions 3.x before 3.5.17, update to version 3.5.17 or later. For Squid versions 4.x before 4.0.9, update to version 4.0.9 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-1589
ALT-PU-2016-1444
CESA-2016_1138
CESA-2016_1139
CESA-2016_1140
CVE-2016-4051
DLA-478-1
DSA-3625-1
MGASA-2016-0148
OPENSUSE-SU-2024:11403-1
RHSA-2016:1138
RHSA-2016:1139
RHSA-2016:1140
RHSA-2016_1138
RHSA-2016_1139
RHSA-2016_1140
SUSE-SU-2016:2008-1
SUSE-SU-2016:2089-1
SUSE-SU-2016:2147-1
SUSE-SU-2016_2147-1
USN-2995-1

Produtos afetados

Alt Linux
Centos
Red Hat
Squid
Squid Cache
Suse
Ubuntu