Lucene search

[email protected]NVD:CVE-2016-4053

HistoryApr 25, 2016 - 2:59 p.m.

CVE-2016-4053

2016-04-2514:59:04

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

Low

EPSS

0.006

Percentile

77.9%

JSON

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.

Affected configurations

NVD

Node

squid-cachesquidMatch3.0

squid-cachesquidMatch3.1

squid-cachesquidMatch3.1.0.1

squid-cachesquidMatch3.1.0.2

squid-cachesquidMatch3.1.0.3

squid-cachesquidMatch3.1.0.4

squid-cachesquidMatch3.1.0.5

squid-cachesquidMatch3.1.0.6

squid-cachesquidMatch3.1.0.7

squid-cachesquidMatch3.1.0.8

squid-cachesquidMatch3.1.0.9

squid-cachesquidMatch3.1.0.10

squid-cachesquidMatch3.1.0.11

squid-cachesquidMatch3.1.0.12

squid-cachesquidMatch3.1.0.13

squid-cachesquidMatch3.1.0.14

squid-cachesquidMatch3.1.0.15

squid-cachesquidMatch3.1.0.16

squid-cachesquidMatch3.1.0.17

squid-cachesquidMatch3.1.0.18

squid-cachesquidMatch3.1.1

squid-cachesquidMatch3.1.2

squid-cachesquidMatch3.1.3

squid-cachesquidMatch3.1.4

squid-cachesquidMatch3.1.5

squid-cachesquidMatch3.1.5.1

squid-cachesquidMatch3.1.6

squid-cachesquidMatch3.1.7

squid-cachesquidMatch3.1.8

squid-cachesquidMatch3.1.9

squid-cachesquidMatch3.1.10

squid-cachesquidMatch3.1.11

squid-cachesquidMatch3.1.12

squid-cachesquidMatch3.1.12.1

squid-cachesquidMatch3.1.12.2

squid-cachesquidMatch3.1.12.3

squid-cachesquidMatch3.1.13

squid-cachesquidMatch3.1.14

squid-cachesquidMatch3.1.15

squid-cachesquidMatch3.1.16

squid-cachesquidMatch3.1.17

squid-cachesquidMatch3.1.18

squid-cachesquidMatch3.1.19

squid-cachesquidMatch3.1.20

squid-cachesquidMatch3.1.21

squid-cachesquidMatch3.1.22

squid-cachesquidMatch3.2.0.1

squid-cachesquidMatch3.2.0.2

squid-cachesquidMatch3.2.0.3

squid-cachesquidMatch3.2.0.4

squid-cachesquidMatch3.2.0.5

squid-cachesquidMatch3.2.0.6

squid-cachesquidMatch3.2.0.7

squid-cachesquidMatch3.2.0.8

squid-cachesquidMatch3.2.0.9

squid-cachesquidMatch3.2.0.10

squid-cachesquidMatch3.2.0.11

squid-cachesquidMatch3.2.0.12

squid-cachesquidMatch3.2.0.13

squid-cachesquidMatch3.2.0.14

squid-cachesquidMatch3.2.0.15

squid-cachesquidMatch3.2.0.16

squid-cachesquidMatch3.2.0.17

squid-cachesquidMatch3.2.0.18

squid-cachesquidMatch3.2.0.19

squid-cachesquidMatch3.2.1

squid-cachesquidMatch3.2.2

squid-cachesquidMatch3.2.3

squid-cachesquidMatch3.2.4

squid-cachesquidMatch3.2.5

squid-cachesquidMatch3.2.6

squid-cachesquidMatch3.2.7

squid-cachesquidMatch3.2.8

squid-cachesquidMatch3.2.9

squid-cachesquidMatch3.2.10

squid-cachesquidMatch3.2.11

squid-cachesquidMatch3.2.12

squid-cachesquidMatch3.2.13

squid-cachesquidMatch3.3.0

squid-cachesquidMatch3.3.0.1

squid-cachesquidMatch3.3.0.2

squid-cachesquidMatch3.3.0.3

squid-cachesquidMatch3.3.1

squid-cachesquidMatch3.3.2

squid-cachesquidMatch3.3.3

squid-cachesquidMatch3.3.4

squid-cachesquidMatch3.3.5

squid-cachesquidMatch3.3.6

squid-cachesquidMatch3.3.7

squid-cachesquidMatch3.3.8

squid-cachesquidMatch3.3.9

squid-cachesquidMatch3.3.10

squid-cachesquidMatch3.3.11

squid-cachesquidMatch3.3.12

squid-cachesquidMatch3.3.13

squid-cachesquidMatch3.3.14

squid-cachesquidMatch3.4.0.1

squid-cachesquidMatch3.4.0.2

squid-cachesquidMatch3.4.0.3

squid-cachesquidMatch3.4.1

squid-cachesquidMatch3.4.2

squid-cachesquidMatch3.4.3

squid-cachesquidMatch3.4.4

squid-cachesquidMatch3.4.4.1

squid-cachesquidMatch3.4.4.2

squid-cachesquidMatch3.4.8

squid-cachesquidMatch3.4.9

squid-cachesquidMatch3.4.10

squid-cachesquidMatch3.4.11

squid-cachesquidMatch3.4.12

squid-cachesquidMatch3.4.13

squid-cachesquidMatch3.4.14

squid-cachesquidMatch3.5.0.1

squid-cachesquidMatch3.5.0.2

squid-cachesquidMatch3.5.0.3

squid-cachesquidMatch3.5.0.4

squid-cachesquidMatch3.5.1

squid-cachesquidMatch3.5.2

squid-cachesquidMatch3.5.3

squid-cachesquidMatch3.5.4

squid-cachesquidMatch3.5.5

squid-cachesquidMatch3.5.6

squid-cachesquidMatch3.5.7

squid-cachesquidMatch3.5.8

squid-cachesquidMatch3.5.9

squid-cachesquidMatch3.5.10

squid-cachesquidMatch3.5.11

squid-cachesquidMatch3.5.12

squid-cachesquidMatch3.5.13

squid-cachesquidMatch3.5.14

squid-cachesquidMatch3.5.15

squid-cachesquidMatch3.5.16

squid-cachesquidMatch4.0.1

squid-cachesquidMatch4.0.2

squid-cachesquidMatch4.0.3

squid-cachesquidMatch4.0.4

squid-cachesquidMatch4.0.5

squid-cachesquidMatch4.0.6

squid-cachesquidMatch4.0.7

squid-cachesquidMatch4.0.8

Node

oraclelinuxMatch6

oraclelinuxMatch7

Node

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch15.10

canonicalubuntu_linuxMatch16.04lts

References

lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html

lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html

lists.opensuse.org/opensuse-updates/2016-08/msg00069.html

www.debian.org/security/2016/dsa-3625

www.openwall.com/lists/oss-security/2016/04/20/6

www.openwall.com/lists/oss-security/2016/04/20/9

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

www.securityfocus.com/bid/86788

www.securityfocus.com/bid/91787

www.securitytracker.com/id/1035647

www.squid-cache.org/Advisories/SQUID-2016_6.txt

www.ubuntu.com/usn/USN-2995-1

access.redhat.com/errata/RHSA-2016:1138

access.redhat.com/errata/RHSA-2016:1139

access.redhat.com/errata/RHSA-2016:1140

security.gentoo.org/glsa/201607-01

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

Low

EPSS

0.006

Percentile

77.9%

JSON

Related for NVD:CVE-2016-4053

debiancve1 prion1 veracode1 cve1 cvelist1 ubuntucve1 nessus27 freebsd1 openvas19 archlinux1 oraclelinux4 redhat3 amazon1 centos3 debian3 osv2 ubuntu1 fedora2 gentoo1 suse2 oracle1