Skip to content
OpenAdvisories
Unscored RHSA-2016:2600 5 CVEs

Red Hat Security Advisory: squid security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server squid 7:3.5.20-2.el7
Red Hat · RHEL 7 enterprise_linux:7::server squid-debuginfo 7:3.5.20-2.el7
Red Hat · RHEL 7 enterprise_linux:7::server squid-migration-script 7:3.5.20-2.el7
Red Hat · RHEL 7 enterprise_linux:7::server squid-sysvinit 7:3.5.20-2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation squid 7:3.5.20-2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation squid-debuginfo 7:3.5.20-2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation squid-migration-script 7:3.5.20-2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation squid-sysvinit 7:3.5.20-2.el7

Vulnerabilities 5

  • Unscored —
    CVE-2016-2569 Public exploit EPSS 31%

    Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote serve…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-2570

    The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-2571

    http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-pars…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-2572 EPSS 10%

    http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote …

  • Unscored —
    CVE-2016-3948 EPSS 35%

    Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause…

    squid squid3 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254016
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254018
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312257
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312262
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1323594
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1330186
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1336940
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2600.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-2569
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2569
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2569
  • article
    http://www.squid-cache.org/Advisories/SQUID-2016_2.txt
  • report
    https://access.redhat.com/security/cve/CVE-2016-2570
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2570
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2570
  • report
    https://access.redhat.com/security/cve/CVE-2016-2571
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2571
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2571
  • report
    https://access.redhat.com/security/cve/CVE-2016-2572
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2572
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2572
  • report
    https://access.redhat.com/security/cve/CVE-2016-3948
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3948
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3948
  • article
    http://www.squid-cache.org/Advisories/SQUID-2016_4.txt