PT-2016-6017 · Squid+5 · Squid+6

Bfek-18

+1

·

Publicado

2014-05-05

·

Atualizado

2019-12-27

·

CVE-2016-4556

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Squid versions 3.x through 3.5.17 Squid versions 4.x through 4.0.9
Description The issue is related to a double free vulnerability in the Esi.cc component. This vulnerability allows remote servers to cause a denial of service, resulting in a crash, by sending a crafted Edge Side Includes (ESI) response.
Recommendations For Squid versions 3.x through 3.5.17, update to version 3.5.18 or later. For Squid versions 4.x through 4.0.9, update to version 4.0.10 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2014-1589
ALT-PU-2016-1463
CESA-2016_1138
CESA-2016_1139
CESA-2016_1140
CVE-2016-4556
DLA-478-1
DSA-3625-1
RHSA-2016:1138
RHSA-2016:1139
RHSA-2016:1140
RHSA-2016_1138
RHSA-2016_1139
RHSA-2016_1140
SUSE-SU-2016:2008-1
SUSE-SU-2016:2089-1
USN-2995-1

Produtos afetados

Alt Linux
Centos
Red Hat
Squid
Squid Cache
Suse
Ubuntu