Skip to content
OpenAdvisories
Unscored RHSA-2016:1140 8 CVEs

Red Hat Security Advisory: squid34 security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server squid34 7:3.4.14-9.el6_8.3
Red Hat · RHEL 6 enterprise_linux:6::server squid34-debuginfo 7:3.4.14-9.el6_8.3
Red Hat · RHEL 6 enterprise_linux:6::workstation squid34 7:3.4.14-9.el6_8.3
Red Hat · RHEL 6 enterprise_linux:6::workstation squid34-debuginfo 7:3.4.14-9.el6_8.3

Vulnerabilities 8

  • Unscored —
    CVE-2016-4051 EPSS 18%

    Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to c…

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2016-4052 EPSS 13%

    Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to caus…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4053 EPSS 14%

    Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via cr…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4054 EPSS 78%

    Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via c…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4553 EPSS 80%

    client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI …

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4554 EPSS 39%

    mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly …

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2016-4555 EPSS 18%

    client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of serv…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4556 EPSS 23%

    Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a d…

    squid3 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://www.squid-cache.org/Advisories/SQUID-2016_5.txt
  • article
    http://www.squid-cache.org/Advisories/SQUID-2016_6.txt
  • article
    http://www.squid-cache.org/Advisories/SQUID-2016_7.txt
  • article
    http://www.squid-cache.org/Advisories/SQUID-2016_8.txt
  • article
    http://www.squid-cache.org/Advisories/SQUID-2016_9.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1329126
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1329136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1334233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1334241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1334246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1334786
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1140.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4051
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4051
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4051
  • report
    https://access.redhat.com/security/cve/CVE-2016-4052
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4052
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4052
  • report
    https://access.redhat.com/security/cve/CVE-2016-4053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4053
  • report
    https://access.redhat.com/security/cve/CVE-2016-4054
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4054
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4054
  • report
    https://access.redhat.com/security/cve/CVE-2016-4553
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4553
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4553
  • report
    https://access.redhat.com/security/cve/CVE-2016-4554
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4554
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4554
  • report
    https://access.redhat.com/security/cve/CVE-2016-4555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4555
  • report
    https://access.redhat.com/security/cve/CVE-2016-4556
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4556
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4556