Skip to content
OpenAdvisories
Unscored DLA-478-1 7 CVEs

squid3 - security update

Published May 16, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 squid3 3.1.20-2.2+deb7u5

Vulnerabilities 7

  • Unscored —
    CVE-2016-4051 EPSS 18%

    Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to c…

  • Unscored —
    CVE-2016-4052 EPSS 13%

    Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to caus…

  • Unscored —
    CVE-2016-4053 EPSS 14%

    Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via cr…

  • Unscored —
    CVE-2016-4054 EPSS 78%

    Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via c…

  • Unscored —
    CVE-2016-4554 EPSS 39%

    mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly …

  • Unscored —
    CVE-2016-4555 EPSS 18%

    client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of serv…

  • Unscored —
    CVE-2016-4556 EPSS 23%

    Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a d…