PT-2016-6015 · Squid+5 · Squid+6

Jianjun Chen · Published 2016-05-10 · Updated 2019-12-27 · CVE-2016-4554

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Squid versions prior to 3.5.18

Description The issue allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, also known as a "header smuggling" issue. This is related to the mime header.cc file in Squid.

Recommendations For versions prior to 3.5.18, update to version 3.5.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the mime header.cc functionality until a patch is available. Avoid using manipulated HTTP Host headers in the affected Squid versions until the issue is resolved.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

ALT-PU-2016-1463

CESA-2016_1138

CESA-2016_1139

CESA-2016_1140

CVE-2016-4554

DLA-478-1

DLA-558-1

DSA-3625-1

MGASA-2016-0171

RHSA-2016:1138

RHSA-2016:1139

RHSA-2016:1140

RHSA-2016_1138

RHSA-2016_1139

RHSA-2016_1140

SUSE-SU-2016:2008-1

SUSE-SU-2016:2089-1

SUSE-SU-2016:2147-1

USN-2995-1

Affected Products

Alt Linux

Centos

Red Hat

Squid

Squid Cache

Suse

Ubuntu

References · 136

• https://access.redhat.com/errata/RHSA-2016:1139 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4553 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4554 · Security Note
• http://squid-cache.org/Versions/v3/3.3/changesets/SQUID-2016_8.patch · Patch
• https://osv.dev/vulnerability/SUSE-SU-2016:2008-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201607-01 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2995-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0171 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3948 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4554 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4054 · Security Note
• https://linux.oracle.com/errata/ELSA-2016-1139.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-4554 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1140 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4556 · Vendor Advisory