PT-2016-5824 · Squid+5 · Squid+6

Publicado

2014-05-05

·

Atualizado

2019-12-27

·

CVE-2016-4053

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Squid versions 3.x through 3.5.16 Squid versions 4.x through 4.0.8
Description The issue allows remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses. This is related to the incorrect use of assert and compiler optimization.
Recommendations For Squid versions 3.x through 3.5.16, update to version 3.5.17 or later. For Squid versions 4.x through 4.0.8, update to version 4.0.9 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-1589
ALT-PU-2016-1444
CESA-2016_1138
CESA-2016_1139
CESA-2016_1140
CVE-2016-4053
DLA-478-1
DSA-3625-1
RHSA-2016:1138
RHSA-2016:1139
RHSA-2016:1140
RHSA-2016_1138
RHSA-2016_1139
RHSA-2016_1140
SUSE-SU-2016:2008-1
SUSE-SU-2016:2089-1
USN-2995-1

Produtos afetados

Alt Linux
Centos
Red Hat
Squid
Squid Cache
Suse
Ubuntu