squid3 - security update

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2016-3948 EPSS 35%

  Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause…

  squid squid3 Debian Ubuntu
  Apr 7, 2016
• Unscored —
  CVE-2016-4051 EPSS 18%

  Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to c…

  squid squid3 Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4052 EPSS 13%

  Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to caus…

  squid3 Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4053 EPSS 14%

  Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via cr…

  squid3 Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4054 EPSS 78%

  Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via c…

  squid3 Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4553 EPSS 80%

  client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI …

  squid3 Ubuntu
  May 10, 2016
• Unscored —
  CVE-2016-4554 EPSS 39%

  mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly …

  squid squid3 Debian Ubuntu
  May 10, 2016
• Unscored —
  CVE-2016-4555 EPSS 18%

  client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of serv…

  squid3 Ubuntu
  May 10, 2016
• Unscored —
  CVE-2016-4556 EPSS 23%

  Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a d…

  squid3 Ubuntu
  May 10, 2016