CVE-2016-5408: Buffer Overflow

Published Aug 10, 2016

Updated

Stack-based buffer overflow in the mungeotherline function in cachemgr.cgi in the squid package before 3.1.23-16.el68.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051.

Affected Software

3 affected components

Oracle Linux=6

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Workstation=6.0

Remediation

Patch Available

http://rhn.redhat.com/errata/RHSA-2016-1573.html

Event History

Aug 10, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5408?

CVE-2016-5408 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2016-5408?

To fix CVE-2016-5408, you should update the squid package to version 3.1.23-16.el6_8.6 or later.

What systems are affected by CVE-2016-5408?

CVE-2016-5408 affects Red Hat Enterprise Linux 6 and Oracle Linux 6 systems using the vulnerable squid package.

Can CVE-2016-5408 be exploited remotely?

Yes, CVE-2016-5408 can be exploited remotely, making it particularly dangerous for unpatched systems.

What is the nature of the vulnerability in CVE-2016-5408?

CVE-2016-5408 is a stack-based buffer overflow vulnerability that can lead to arbitrary code execution.