Lucene search
HistoryApr 07, 2016 - 6:59 p.m.
CVE-2016-3948
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.7
Confidence
High
EPSS
0.06
Percentile
93.5%
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
Affected configurations
Node
squid-cachesquidMatch3.0
ORsquid-cachesquidMatch3.0-pre1
ORsquid-cachesquidMatch3.0-pre2
ORsquid-cachesquidMatch3.0-pre3
ORsquid-cachesquidMatch3.0-pre4
ORsquid-cachesquidMatch3.0-pre5
ORsquid-cachesquidMatch3.0-pre6
ORsquid-cachesquidMatch3.0-pre7
ORsquid-cachesquidMatch3.0rc4
ORsquid-cachesquidMatch3.0.stable1
ORsquid-cachesquidMatch3.0.stable2
ORsquid-cachesquidMatch3.0.stable3
ORsquid-cachesquidMatch3.0.stable4
ORsquid-cachesquidMatch3.0.stable5
ORsquid-cachesquidMatch3.0.stable6
ORsquid-cachesquidMatch3.0.stable7
ORsquid-cachesquidMatch3.0.stable8
ORsquid-cachesquidMatch3.0.stable9
ORsquid-cachesquidMatch3.0.stable10
ORsquid-cachesquidMatch3.0.stable11
ORsquid-cachesquidMatch3.0.stable11rc1
ORsquid-cachesquidMatch3.0.stable12
ORsquid-cachesquidMatch3.0.stable13
ORsquid-cachesquidMatch3.0.stable14
ORsquid-cachesquidMatch3.0.stable15
ORsquid-cachesquidMatch3.0.stable16
ORsquid-cachesquidMatch3.0.stable16rc1
ORsquid-cachesquidMatch3.0.stable17
ORsquid-cachesquidMatch3.0.stable18
ORsquid-cachesquidMatch3.0.stable19
ORsquid-cachesquidMatch3.0.stable20
ORsquid-cachesquidMatch3.0.stable21
ORsquid-cachesquidMatch3.0.stable22
ORsquid-cachesquidMatch3.0.stable23
ORsquid-cachesquidMatch3.0.stable24
ORsquid-cachesquidMatch3.0.stable25
ORsquid-cachesquidMatch3.1
ORsquid-cachesquidMatch3.1.0.1
ORsquid-cachesquidMatch3.1.0.2
ORsquid-cachesquidMatch3.1.0.3
ORsquid-cachesquidMatch3.1.0.4
ORsquid-cachesquidMatch3.1.0.5
ORsquid-cachesquidMatch3.1.0.6
ORsquid-cachesquidMatch3.1.0.7
ORsquid-cachesquidMatch3.1.0.8
ORsquid-cachesquidMatch3.1.0.9
ORsquid-cachesquidMatch3.1.0.10
ORsquid-cachesquidMatch3.1.0.11
ORsquid-cachesquidMatch3.1.0.12
ORsquid-cachesquidMatch3.1.0.13
ORsquid-cachesquidMatch3.1.0.14
ORsquid-cachesquidMatch3.1.0.15
ORsquid-cachesquidMatch3.1.0.16
ORsquid-cachesquidMatch3.1.0.17
ORsquid-cachesquidMatch3.1.0.18
ORsquid-cachesquidMatch3.1.1
ORsquid-cachesquidMatch3.1.2
ORsquid-cachesquidMatch3.1.3
ORsquid-cachesquidMatch3.1.4
ORsquid-cachesquidMatch3.1.5
ORsquid-cachesquidMatch3.1.5.1
ORsquid-cachesquidMatch3.1.6
ORsquid-cachesquidMatch3.1.7
ORsquid-cachesquidMatch3.1.8
ORsquid-cachesquidMatch3.1.9
ORsquid-cachesquidMatch3.1.10
ORsquid-cachesquidMatch3.1.11
ORsquid-cachesquidMatch3.1.12
ORsquid-cachesquidMatch3.1.13
ORsquid-cachesquidMatch3.1.14
ORsquid-cachesquidMatch3.1.15
ORsquid-cachesquidMatch3.2.0.1
ORsquid-cachesquidMatch3.2.0.2
ORsquid-cachesquidMatch3.2.0.3
ORsquid-cachesquidMatch3.2.0.4
ORsquid-cachesquidMatch3.2.0.5
ORsquid-cachesquidMatch3.2.0.6
ORsquid-cachesquidMatch3.2.0.7
ORsquid-cachesquidMatch3.2.0.8
ORsquid-cachesquidMatch3.2.0.9
ORsquid-cachesquidMatch3.2.0.10
ORsquid-cachesquidMatch3.2.0.11
ORsquid-cachesquidMatch3.2.0.12
ORsquid-cachesquidMatch3.2.0.13
ORsquid-cachesquidMatch3.2.0.14
ORsquid-cachesquidMatch3.2.0.15
ORsquid-cachesquidMatch3.2.0.16
ORsquid-cachesquidMatch3.2.0.17
ORsquid-cachesquidMatch3.2.0.18
ORsquid-cachesquidMatch3.2.0.19
ORsquid-cachesquidMatch3.2.1
ORsquid-cachesquidMatch3.2.2
ORsquid-cachesquidMatch3.2.3
ORsquid-cachesquidMatch3.2.4
ORsquid-cachesquidMatch3.2.5
ORsquid-cachesquidMatch3.2.6
ORsquid-cachesquidMatch3.2.7
ORsquid-cachesquidMatch3.2.8
ORsquid-cachesquidMatch3.2.9
ORsquid-cachesquidMatch3.2.10
ORsquid-cachesquidMatch3.2.11
ORsquid-cachesquidMatch3.2.12
ORsquid-cachesquidMatch3.2.13
ORsquid-cachesquidMatch3.3.0
ORsquid-cachesquidMatch3.3.0.2
ORsquid-cachesquidMatch3.3.0.3
ORsquid-cachesquidMatch3.3.1
ORsquid-cachesquidMatch3.3.2
ORsquid-cachesquidMatch3.3.3
ORsquid-cachesquidMatch3.3.4
ORsquid-cachesquidMatch3.3.5
ORsquid-cachesquidMatch3.3.6
ORsquid-cachesquidMatch3.3.7
ORsquid-cachesquidMatch3.3.8
ORsquid-cachesquidMatch3.3.9
ORsquid-cachesquidMatch3.3.10
ORsquid-cachesquidMatch3.3.11
ORsquid-cachesquidMatch3.3.12
ORsquid-cachesquidMatch3.3.13
ORsquid-cachesquidMatch3.4.0.1
ORsquid-cachesquidMatch3.4.0.2
ORsquid-cachesquidMatch3.4.0.3
ORsquid-cachesquidMatch3.4.1
ORsquid-cachesquidMatch3.4.2
ORsquid-cachesquidMatch3.4.3
ORsquid-cachesquidMatch3.4.4
ORsquid-cachesquidMatch3.4.8
ORsquid-cachesquidMatch3.4.9
ORsquid-cachesquidMatch3.4.10
ORsquid-cachesquidMatch3.4.11
ORsquid-cachesquidMatch3.4.12
ORsquid-cachesquidMatch3.4.13
ORsquid-cachesquidMatch3.5.0.1
ORsquid-cachesquidMatch3.5.0.2
ORsquid-cachesquidMatch3.5.0.3
ORsquid-cachesquidMatch3.5.0.4
ORsquid-cachesquidMatch3.5.1
ORsquid-cachesquidMatch3.5.2
ORsquid-cachesquidMatch3.5.3
ORsquid-cachesquidMatch3.5.4
ORsquid-cachesquidMatch3.5.5
ORsquid-cachesquidMatch3.5.6
ORsquid-cachesquidMatch3.5.7
ORsquid-cachesquidMatch3.5.8
ORsquid-cachesquidMatch3.5.9
ORsquid-cachesquidMatch3.5.10
ORsquid-cachesquidMatch3.5.11
ORsquid-cachesquidMatch3.5.12
ORsquid-cachesquidMatch3.5.13
ORsquid-cachesquidMatch3.5.14
ORsquid-cachesquidMatch3.5.15
ORsquid-cachesquidMatch4.0.1
ORsquid-cachesquidMatch4.0.2
ORsquid-cachesquidMatch4.0.3
ORsquid-cachesquidMatch4.0.4
ORsquid-cachesquidMatch4.0.5
ORsquid-cachesquidMatch4.0.6
ORsquid-cachesquidMatch4.0.7
References
lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html
lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html
lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
rhn.redhat.com/errata/RHSA-2016-2600.html
www.securitytracker.com/id/1035458
www.squid-cache.org/Advisories/SQUID-2016_4.txt
www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14016.patch
security.gentoo.org/glsa/201607-01
usn.ubuntu.com/3557-1/
Related
ubuntucve
ubuntucve
CVE-2016-3948
2016-04-07 00:00:00
prion
prion
Out-of-bounds
2016-04-07 18:59:00
cvelist
cvelist
CVE-2016-3948
2016-04-07 18:00:00
checkpoint_advisories
checkpoint_advisories
Squid HTTP Response Processing Denial of Service (CVE-2016-3948)
2016-05-19 00:00:00
cve
cve
CVE-2016-3948
2016-04-07 18:59:01
debiancve
debiancve
CVE-2016-3948
2016-04-07 18:59:01
mageia
mageia
Updated squid packages fix security vulnerabilities
2016-04-06 17:09:53
nessus
nessus
Squid 3.x < 3.5.16, 4.0.x < 4.0.8 Multiple Vulnerabilities
2016-10-31 00:00:00
FreeBSD : squid -- multiple vulnerabilities (297117ba-f92d-11e5-92ce-002590263bf5)
2016-04-05 00:00:00
EulerOS 2.0 SP1 : squid (EulerOS-SA-2016-1056)
2017-05-01 00:00:00
openvas
openvas
Squid Multiple DoS Vulnerabilities (SQUID-2016:3, SQUID-2016:4) - Linux
2016-04-18 00:00:00
Mageia: Security Advisory (MGASA-2016-0133)
2016-05-09 00:00:00
Squid Multiple DoS Vulnerabilities (SQUID-2016:3, SQUID-2016:4) - Windows
2016-04-18 00:00:00
freebsd
freebsd
squid -- multiple vulnerabilities
2016-03-28 00:00:00
redhat
redhat
(RHSA-2016:2600) Moderate: squid security, bug fix, and enhancement update
2016-11-03 06:07:16
centos
centos
squid security update
2016-11-25 16:02:47
ubuntu
ubuntu
Squid regression
2022-12-12 00:00:00
Squid vulnerabilities
2018-02-05 00:00:00
osv
osv
squid3 regression
2022-12-12 00:46:49
fedora
fedora
[SECURITY] Fedora 24 Update: squid-3.5.19-2.fc24
2016-07-12 20:35:35
[SECURITY] Fedora 23 Update: squid-3.5.10-4.fc23
2016-07-13 00:00:11
oraclelinux
oraclelinux
squid security, bug fix, and enhancement update
2016-11-09 00:00:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2016-07-09 00:00:00
suse
suse
Security update for squid3 (important)
2016-08-16 18:08:55
Security update for squid3 (important)
2016-08-09 17:12:26
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.7
Confidence
High
EPSS
0.06
Percentile
93.5%
Related for NVD:CVE-2016-3948