PT-2016-5823 · Squid+5 · Squid+6

Yuriy M. Kaminskiy

·

Publicado

2014-05-05

·

Atualizado

2024-06-15

·

CVE-2016-4052

CVSS v3.1

8.1

Alta

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Squid versions 3.x through 3.5.17 Squid versions 4.x through 4.0.9
Description The issue is related to multiple stack-based buffer overflows that can be triggered by crafted Edge Side Includes (ESI) responses from remote HTTP servers. This can lead to a denial of service or potentially allow the execution of arbitrary code.
Recommendations For Squid versions 3.x through 3.5.17, update to version 3.5.17 or later. For Squid versions 4.x through 4.0.9, update to version 4.0.9 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-1589
ALT-PU-2016-1444
CESA-2016_1138
CESA-2016_1139
CESA-2016_1140
CVE-2016-4052
DLA-478-1
DSA-3625-1
OPENSUSE-SU-2024:11403-1
RHSA-2016:1138
RHSA-2016:1139
RHSA-2016:1140
RHSA-2016_1138
RHSA-2016_1139
RHSA-2016_1140
SUSE-SU-2016:2008-1
SUSE-SU-2016:2089-1
USN-2995-1

Produtos afetados

Alt Linux
Centos
Red Hat
Squid
Squid Cache
Suse
Ubuntu