PT-2016-5825 · Squid+5 · Squid+6

Yuriy M. Kaminskiy

·

Publicado

2014-05-05

·

Atualizado

2019-12-27

·

CVE-2016-4054

CVSS v3.1

8.1

Alta

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Squid versions 3.x through 3.5.17 Squid versions 4.x through 4.0.9
Description A buffer overflow issue allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
Recommendations For Squid versions 3.x through 3.5.17, update to version 3.5.17 or later. For Squid versions 4.x through 4.0.9, update to version 4.0.9 or later.

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-1589
ALT-PU-2016-1444
CESA-2016_1138
CESA-2016_1139
CESA-2016_1140
CVE-2016-4054
DLA-478-1
DSA-3625-1
RHSA-2016:1138
RHSA-2016:1139
RHSA-2016:1140
RHSA-2016_1138
RHSA-2016_1139
RHSA-2016_1140
SUSE-SU-2016:2008-1
SUSE-SU-2016:2089-1
USN-2995-1

Produtos afetados

Alt Linux
Centos
Red Hat
Squid
Squid Cache
Suse
Ubuntu