Summary
[7:3.3.8-26.3]
- Related: #1330576 - CVE-2016-4553 squid: Cache poisoning issue in
HTTP Request handling
- Related: #1334491 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
squid: various flaws
[7:3.3.8-26.2]
- Related: #1330576 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
squid: various flaws
[7:3.3.8-26.1]
- Resolves: #1330576 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
squid: various flaws
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | squid | 7:3.3.8-26.el7_2.3 |
| Oracle Linux · 7 | squid-sysvinit | 7:3.3.8-26.el7_2.3 |
Vulnerabilities 8
-
Unscored —CVE-2016-4051 EPSS 18%
Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to c…
-
Unscored —CVE-2016-4052 EPSS 13%
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to caus…
-
Unscored —CVE-2016-4053 EPSS 14%
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via cr…
-
Unscored —CVE-2016-4054 EPSS 78%
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via c…
-
Unscored —CVE-2016-4553 EPSS 80%
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI …
-
Unscored —CVE-2016-4554 EPSS 39%
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly …
-
Unscored —CVE-2016-4555 EPSS 18%
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of serv…
-
Unscored —CVE-2016-4556 EPSS 23%
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a d…