Skip to content
OpenAdvisories
Unscored USN-2995-1 9 CVEs

squid3 vulnerabilities

Published Jun 9, 2016 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Yuriy M. Kaminskiy discovered that the Squid pinger utility incorrectly
handled certain ICMPv6 packets. A remote attacker could use this issue to
cause Squid to crash, resulting in a denial of service, or possibly cause
Squid to leak information into log files. (CVE-2016-3947)

Yuriy M. Kaminskiy discovered that the Squid cachemgr.cgi tool incorrectly
handled certain crafted data. A remote attacker could use this issue to
cause Squid to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2016-4051)

It was discovered that Squid incorrectly handled certain Edge Side Includes
(ESI) responses. A remote attacker could possibly use this issue to cause
Squid to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)

Jianjun Chen discovered that Squid did not correctly ignore the Host header
when absolute-URI is provided. A remote attacker could possibly use this
issue to conduct cache-poisoning attacks. This issue only affected Ubuntu
14.04 LTS, Ubuntu 15.10 and Ubuntu 16.04 LTS. (CVE-2016-4553)

Jianjun Chen discovered that Squid incorrectly handled certain HTTP Host
headers. A remote attacker could possibly use this issue to conduct
cache-poisoning attacks. (CVE-2016-4554)

It was discovered that Squid incorrectly handled certain Edge Side Includes
(ESI) responses. A remote attacker could possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2016-4555,
CVE-2016-4556)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS squid3 3.3.8-1ubuntu6.8
Ubuntu · 16.04 LTS 16.04:LTS squid3 3.5.12-1ubuntu7.2

Vulnerabilities 9

  • Unscored —
    CVE-2016-3947 EPSS 15%

    Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 an…

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2016-4051 EPSS 18%

    Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to c…

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2016-4052 EPSS 13%

    Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to caus…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4053 EPSS 14%

    Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via cr…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4054 EPSS 78%

    Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via c…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4553 EPSS 80%

    client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI …

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4554 EPSS 39%

    mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly …

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2016-4555 EPSS 18%

    client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of serv…

    squid3 Ubuntu
  • Unscored —
    CVE-2016-4556 EPSS 23%

    Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a d…

    squid3 Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-3947
  • report
    https://ubuntu.com/security/CVE-2016-4051
  • report
    https://ubuntu.com/security/CVE-2016-4052
  • report
    https://ubuntu.com/security/CVE-2016-4053
  • report
    https://ubuntu.com/security/CVE-2016-4054
  • report
    https://ubuntu.com/security/CVE-2016-4553
  • report
    https://ubuntu.com/security/CVE-2016-4554
  • report
    https://ubuntu.com/security/CVE-2016-4555
  • report
    https://ubuntu.com/security/CVE-2016-4556