CVE-2016-4053: Buffer Overflow
First published: Mon Apr 25 2016(Updated: )
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.1 | |
| Squid-Cache Squid | =3.1.0.1 | |
| Squid-Cache Squid | =3.1.0.2 | |
| Squid-Cache Squid | =3.1.0.3 | |
| Squid-Cache Squid | =3.1.0.4 | |
| Squid-Cache Squid | =3.1.0.5 | |
| Squid-Cache Squid | =3.1.0.6 | |
| Squid-Cache Squid | =3.1.0.7 | |
| Squid-Cache Squid | =3.1.0.8 | |
| Squid-Cache Squid | =3.1.0.9 | |
| Squid-Cache Squid | =3.1.0.10 | |
| Squid-Cache Squid | =3.1.0.11 | |
| Squid-Cache Squid | =3.1.0.12 | |
| Squid-Cache Squid | =3.1.0.13 | |
| Squid-Cache Squid | =3.1.0.14 | |
| Squid-Cache Squid | =3.1.0.15 | |
| Squid-Cache Squid | =3.1.0.16 | |
| Squid-Cache Squid | =3.1.0.17 | |
| Squid-Cache Squid | =3.1.0.18 | |
| Squid-Cache Squid | =3.1.1 | |
| Squid-Cache Squid | =3.1.2 | |
| Squid-Cache Squid | =3.1.3 | |
| Squid-Cache Squid | =3.1.4 | |
| Squid-Cache Squid | =3.1.5 | |
| Squid-Cache Squid | =3.1.5.1 | |
| Squid-Cache Squid | =3.1.6 | |
| Squid-Cache Squid | =3.1.7 | |
| Squid-Cache Squid | =3.1.8 | |
| Squid-Cache Squid | =3.1.9 | |
| Squid-Cache Squid | =3.1.10 | |
| Squid-Cache Squid | =3.1.11 | |
| Squid-Cache Squid | =3.1.12 | |
| Squid-Cache Squid | =3.1.12.1 | |
| Squid-Cache Squid | =3.1.12.2 | |
| Squid-Cache Squid | =3.1.12.3 | |
| Squid-Cache Squid | =3.1.13 | |
| Squid-Cache Squid | =3.1.14 | |
| Squid-Cache Squid | =3.1.15 | |
| Squid-Cache Squid | =3.1.16 | |
| Squid-Cache Squid | =3.1.17 | |
| Squid-Cache Squid | =3.1.18 | |
| Squid-Cache Squid | =3.1.19 | |
| Squid-Cache Squid | =3.1.20 | |
| Squid-Cache Squid | =3.1.21 | |
| Squid-Cache Squid | =3.1.22 | |
| Squid-Cache Squid | =3.2.0.1 | |
| Squid-Cache Squid | =3.2.0.2 | |
| Squid-Cache Squid | =3.2.0.3 | |
| Squid-Cache Squid | =3.2.0.4 | |
| Squid-Cache Squid | =3.2.0.5 | |
| Squid-Cache Squid | =3.2.0.6 | |
| Squid-Cache Squid | =3.2.0.7 | |
| Squid-Cache Squid | =3.2.0.8 | |
| Squid-Cache Squid | =3.2.0.9 | |
| Squid-Cache Squid | =3.2.0.10 | |
| Squid-Cache Squid | =3.2.0.11 | |
| Squid-Cache Squid | =3.2.0.12 | |
| Squid-Cache Squid | =3.2.0.13 | |
| Squid-Cache Squid | =3.2.0.14 | |
| Squid-Cache Squid | =3.2.0.15 | |
| Squid-Cache Squid | =3.2.0.16 | |
| Squid-Cache Squid | =3.2.0.17 | |
| Squid-Cache Squid | =3.2.0.18 | |
| Squid-Cache Squid | =3.2.0.19 | |
| Squid-Cache Squid | =3.2.1 | |
| Squid-Cache Squid | =3.2.2 | |
| Squid-Cache Squid | =3.2.3 | |
| Squid-Cache Squid | =3.2.4 | |
| Squid-Cache Squid | =3.2.5 | |
| Squid-Cache Squid | =3.2.6 | |
| Squid-Cache Squid | =3.2.7 | |
| Squid-Cache Squid | =3.2.8 | |
| Squid-Cache Squid | =3.2.9 | |
| Squid-Cache Squid | =3.2.10 | |
| Squid-Cache Squid | =3.2.11 | |
| Squid-Cache Squid | =3.2.12 | |
| Squid-Cache Squid | =3.2.13 | |
| Squid-Cache Squid | =3.3.0 | |
| Squid-Cache Squid | =3.3.0.1 | |
| Squid-Cache Squid | =3.3.0.2 | |
| Squid-Cache Squid | =3.3.0.3 | |
| Squid-Cache Squid | =3.3.1 | |
| Squid-Cache Squid | =3.3.2 | |
| Squid-Cache Squid | =3.3.3 | |
| Squid-Cache Squid | =3.3.4 | |
| Squid-Cache Squid | =3.3.5 | |
| Squid-Cache Squid | =3.3.6 | |
| Squid-Cache Squid | =3.3.7 | |
| Squid-Cache Squid | =3.3.8 | |
| Squid-Cache Squid | =3.3.9 | |
| Squid-Cache Squid | =3.3.10 | |
| Squid-Cache Squid | =3.3.11 | |
| Squid-Cache Squid | =3.3.12 | |
| Squid-Cache Squid | =3.3.13 | |
| Squid-Cache Squid | =3.3.14 | |
| Squid-Cache Squid | =3.4.0.1 | |
| Squid-Cache Squid | =3.4.0.2 | |
| Squid-Cache Squid | =3.4.0.3 | |
| Squid-Cache Squid | =3.4.1 | |
| Squid-Cache Squid | =3.4.2 | |
| Squid-Cache Squid | =3.4.3 | |
| Squid-Cache Squid | =3.4.4 | |
| Squid-Cache Squid | =3.4.4.1 | |
| Squid-Cache Squid | =3.4.4.2 | |
| Squid-Cache Squid | =3.4.8 | |
| Squid-Cache Squid | =3.4.9 | |
| Squid-Cache Squid | =3.4.10 | |
| Squid-Cache Squid | =3.4.11 | |
| Squid-Cache Squid | =3.4.12 | |
| Squid-Cache Squid | =3.4.13 | |
| Squid-Cache Squid | =3.4.14 | |
| Squid-Cache Squid | =3.5.0.1 | |
| Squid-Cache Squid | =3.5.0.2 | |
| Squid-Cache Squid | =3.5.0.3 | |
| Squid-Cache Squid | =3.5.0.4 | |
| Squid-Cache Squid | =3.5.1 | |
| Squid-Cache Squid | =3.5.2 | |
| Squid-Cache Squid | =3.5.3 | |
| Squid-Cache Squid | =3.5.4 | |
| Squid-Cache Squid | =3.5.5 | |
| Squid-Cache Squid | =3.5.6 | |
| Squid-Cache Squid | =3.5.7 | |
| Squid-Cache Squid | =3.5.8 | |
| Squid-Cache Squid | =3.5.9 | |
| Squid-Cache Squid | =3.5.10 | |
| Squid-Cache Squid | =3.5.11 | |
| Squid-Cache Squid | =3.5.12 | |
| Squid-Cache Squid | =3.5.13 | |
| Squid-Cache Squid | =3.5.14 | |
| Squid-Cache Squid | =3.5.15 | |
| Squid-Cache Squid | =3.5.16 | |
| Squid-Cache Squid | =4.0.1 | |
| Squid-Cache Squid | =4.0.2 | |
| Squid-Cache Squid | =4.0.3 | |
| Squid-Cache Squid | =4.0.4 | |
| Squid-Cache Squid | =4.0.5 | |
| Squid-Cache Squid | =4.0.6 | |
| Squid-Cache Squid | =4.0.7 | |
| Squid-Cache Squid | =4.0.8 | |
| Oracle Linux | =6 | |
| Oracle Linux | =7 | |
| Canonical Ubuntu Linux | =12.04 | |
| Canonical Ubuntu Linux | =14.04 | |
| Canonical Ubuntu Linux | =15.10 | |
| Canonical Ubuntu Linux | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
- http://www.debian.org/security/2016/dsa-3625
- http://www.openwall.com/lists/oss-security/2016/04/20/6
- http://www.openwall.com/lists/oss-security/2016/04/20/9
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/86788
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1035647
- http://www.squid-cache.org/Advisories/SQUID-2016_6.txt
- http://www.ubuntu.com/usn/USN-2995-1
- https://access.redhat.com/errata/RHSA-2016:1138
- https://access.redhat.com/errata/RHSA-2016:1139
- https://access.redhat.com/errata/RHSA-2016:1140
- https://security.gentoo.org/glsa/201607-01
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/event
- agent/type
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/squid-cache
- canonical/squid-cache squid
- version/squid-cache squid/3.0
- version/squid-cache squid/3.1
- version/squid-cache squid/3.1.0.1
- version/squid-cache squid/3.1.0.2
- version/squid-cache squid/3.1.0.3
- version/squid-cache squid/3.1.0.4
- version/squid-cache squid/3.1.0.5
- version/squid-cache squid/3.1.0.6
- version/squid-cache squid/3.1.0.7
- version/squid-cache squid/3.1.0.8
- version/squid-cache squid/3.1.0.9
- version/squid-cache squid/3.1.0.10
- version/squid-cache squid/3.1.0.11
- version/squid-cache squid/3.1.0.12
- version/squid-cache squid/3.1.0.13
- version/squid-cache squid/3.1.0.14
- version/squid-cache squid/3.1.0.15
- version/squid-cache squid/3.1.0.16
- version/squid-cache squid/3.1.0.17
- version/squid-cache squid/3.1.0.18
- version/squid-cache squid/3.1.1
- version/squid-cache squid/3.1.2
- version/squid-cache squid/3.1.3
- version/squid-cache squid/3.1.4
- version/squid-cache squid/3.1.5
- version/squid-cache squid/3.1.5.1
- version/squid-cache squid/3.1.6
- version/squid-cache squid/3.1.7
- version/squid-cache squid/3.1.8
- version/squid-cache squid/3.1.9
- version/squid-cache squid/3.1.10
- version/squid-cache squid/3.1.11
- version/squid-cache squid/3.1.12
- version/squid-cache squid/3.1.12.1
- version/squid-cache squid/3.1.12.2
- version/squid-cache squid/3.1.12.3
- version/squid-cache squid/3.1.13
- version/squid-cache squid/3.1.14
- version/squid-cache squid/3.1.15
- version/squid-cache squid/3.1.16
- version/squid-cache squid/3.1.17
- version/squid-cache squid/3.1.18
- version/squid-cache squid/3.1.19
- version/squid-cache squid/3.1.20
- version/squid-cache squid/3.1.21
- version/squid-cache squid/3.1.22
- version/squid-cache squid/3.2.0.1
- version/squid-cache squid/3.2.0.2
- version/squid-cache squid/3.2.0.3
- version/squid-cache squid/3.2.0.4
- version/squid-cache squid/3.2.0.5
- version/squid-cache squid/3.2.0.6
- version/squid-cache squid/3.2.0.7
- version/squid-cache squid/3.2.0.8
- version/squid-cache squid/3.2.0.9
- version/squid-cache squid/3.2.0.10
- version/squid-cache squid/3.2.0.11
- version/squid-cache squid/3.2.0.12
- version/squid-cache squid/3.2.0.13
- version/squid-cache squid/3.2.0.14
- version/squid-cache squid/3.2.0.15
- version/squid-cache squid/3.2.0.16
- version/squid-cache squid/3.2.0.17
- version/squid-cache squid/3.2.0.18
- version/squid-cache squid/3.2.0.19
- version/squid-cache squid/3.2.1
- version/squid-cache squid/3.2.2
- version/squid-cache squid/3.2.3
- version/squid-cache squid/3.2.4
- version/squid-cache squid/3.2.5
- version/squid-cache squid/3.2.6
- version/squid-cache squid/3.2.7
- version/squid-cache squid/3.2.8
- version/squid-cache squid/3.2.9
- version/squid-cache squid/3.2.10
- version/squid-cache squid/3.2.11
- version/squid-cache squid/3.2.12
- version/squid-cache squid/3.2.13
- version/squid-cache squid/3.3.0
- version/squid-cache squid/3.3.0.1
- version/squid-cache squid/3.3.0.2
- version/squid-cache squid/3.3.0.3
- version/squid-cache squid/3.3.1
- version/squid-cache squid/3.3.2
- version/squid-cache squid/3.3.3
- version/squid-cache squid/3.3.4
- version/squid-cache squid/3.3.5
- version/squid-cache squid/3.3.6
- version/squid-cache squid/3.3.7
- version/squid-cache squid/3.3.8
- version/squid-cache squid/3.3.9
- version/squid-cache squid/3.3.10
- version/squid-cache squid/3.3.11
- version/squid-cache squid/3.3.12
- version/squid-cache squid/3.3.13
- version/squid-cache squid/3.3.14
- version/squid-cache squid/3.4.0.1
- version/squid-cache squid/3.4.0.2
- version/squid-cache squid/3.4.0.3
- version/squid-cache squid/3.4.1
- version/squid-cache squid/3.4.2
- version/squid-cache squid/3.4.3
- version/squid-cache squid/3.4.4
- version/squid-cache squid/3.4.4.1
- version/squid-cache squid/3.4.4.2
- version/squid-cache squid/3.4.8
- version/squid-cache squid/3.4.9
- version/squid-cache squid/3.4.10
- version/squid-cache squid/3.4.11
- version/squid-cache squid/3.4.12
- version/squid-cache squid/3.4.13
- version/squid-cache squid/3.4.14
- version/squid-cache squid/3.5.0.1
- version/squid-cache squid/3.5.0.2
- version/squid-cache squid/3.5.0.3
- version/squid-cache squid/3.5.0.4
- version/squid-cache squid/3.5.1
- version/squid-cache squid/3.5.2
- version/squid-cache squid/3.5.3
- version/squid-cache squid/3.5.4
- version/squid-cache squid/3.5.5
- version/squid-cache squid/3.5.6
- version/squid-cache squid/3.5.7
- version/squid-cache squid/3.5.8
- version/squid-cache squid/3.5.9
- version/squid-cache squid/3.5.10
- version/squid-cache squid/3.5.11
- version/squid-cache squid/3.5.12
- version/squid-cache squid/3.5.13
- version/squid-cache squid/3.5.14
- version/squid-cache squid/3.5.15
- version/squid-cache squid/3.5.16
- version/squid-cache squid/4.0.1
- version/squid-cache squid/4.0.2
- version/squid-cache squid/4.0.3
- version/squid-cache squid/4.0.4
- version/squid-cache squid/4.0.5
- version/squid-cache squid/4.0.6
- version/squid-cache squid/4.0.7
- version/squid-cache squid/4.0.8
- vendor/oracle
- canonical/oracle linux
- version/oracle linux/6
- version/oracle linux/7
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/12.04
- version/canonical ubuntu linux/14.04
- version/canonical ubuntu linux/15.10
- version/canonical ubuntu linux/16.04