CVE-2016-2570

squid: some code paths fail to check bounds in string object

The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.

CVSS 3.0 · 7.5 High EPSS 9.0% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid

CVE-2016-2571

squid: wrong error handling for malformed HTTP responses

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

CVSS 3.0 · 7.5 High EPSS 9.3% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid

CVE-2016-2572

squid: wrong error handling for malformed HTTP responses

http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

CVSS 3.0 · 7.5 High EPSS 10.2% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid

CVE-2016-3947

squid: buffer overrun in Squid proxy pinger

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.

CVSS 3.0 · 8.2 High EPSS 14.6% KEV · Not listed

Vendors

Canonical Squid-cache

Products

Ubuntu Linux Squid

CVE-2016-3948

squid: denial of service issue in HTTP response processing

Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.

CVSS 3.0 · 7.5 High EPSS 35.3% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid

CVE-2016-4051

squid: buffer overflow in cachemgr.cgi

Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.

CVSS 3.0 · 8.8 High EPSS 18.3% KEV · Not listed

Vendors

Canonical Oracle Redhat and 1 more

Products

Ubuntu Linux Linux Enterprise Linux and 1 more

CVE-2016-4052

squid: multiple issues in ESI processing

Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 8.1 High EPSS 12.9% KEV · Not listed

Vendors

Canonical Redhat Squid-cache

Products

Ubuntu Linux Enterprise Linux Squid

CVE-2016-4053

squid: multiple issues in ESI processing

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.

CVSS 3.0 · 3.7 Low EPSS 14.4% KEV · Not listed

Vendors

Canonical Oracle Redhat and 1 more

Products

Ubuntu Linux Linux Enterprise Linux and 1 more

CVE-2016-4054

squid: multiple issues in ESI processing

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 8.1 High EPSS 77.6% KEV · Not listed

Vendors

Canonical Oracle Redhat and 1 more

Products

Ubuntu Linux Linux Enterprise Linux and 1 more

CVE-2016-4553

squid: Cache poisoning issue in HTTP Request handling

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.

CVSS 3.0 · 8.6 High EPSS 80.0% KEV · Not listed

Vendors

Canonical Oracle Redhat and 1 more

Products

Ubuntu Linux Linux Enterprise Linux and 1 more

CVE-2016-4554

squid: Header Smuggling issue in HTTP Request processing

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.

CVSS 3.0 · 8.6 High EPSS 38.9% KEV · Not listed

Vendors

Canonical Oracle Redhat and 1 more

Products

Ubuntu Linux Linux Enterprise Linux and 1 more

CVE-2016-4555

squid: SegFault from ESIInclude::Start

client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 7.5 High EPSS 18.2% KEV · Not listed

Vendors

Canonical Oracle Redhat and 1 more

Products

Ubuntu Linux Linux Enterprise Linux and 1 more

CVE-2016-4556

squid: SIGSEGV in ESIContext response handling

Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.

CVSS 3.0 · 7.5 High EPSS 23.1% KEV · Not listed

Vendors

Canonical Oracle Redhat and 1 more

Products

Ubuntu Linux Linux Enterprise Linux and 1 more

CVE-2013-4123

squid: Denial of service when processing specially-crafted HTTP requests (SQUID-2013:3)

client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.

CVSS 2.0 · 5.0 Medium EPSS 80.5% KEV · Not listed

Vendors

Opensuse Squid-cache

Products

Opensuse Squid

CVE-2010-0308

squid: temporary DoS (assertion failure) triggered by truncated DNS packet (SQUID-2010:1)

lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.

CVSS 2.0 · 4.0 Medium EPSS 27.8% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid

CVE-2010-0639

squid: HTCP packet temporary DoS (SQUID-2010:2)

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

CVSS 2.0 · 5.0 Medium EPSS 31.1% KEV · Not listed

Vendors

Squid-cache

Products

Squid

CVE-2010-2951

squid: child assertion failure when processing large DNS replies with no IPv6 resolver present

dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set.

CVSS 2.0 · 5.0 Medium EPSS 31.5% KEV · Not listed

Vendors

Squid-cache

Products

Squid

CVE-2010-3072

Squid: Denial of service due internal error in string handling (SQUID-2010:3)

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

CVSS 2.0 · 5.0 Medium EPSS 59.9% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid

CVE-2011-3205

squid: buffer overflow flaw in Squid's Gopher reply parser (SQUID-2011:3)

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.

CVSS 2.0 · 6.8 Medium EPSS 27.5% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid

CVE-2011-4096

squid: Invalid free by processing CNAME DNS record pointing to another CNAME record pointing to an empty A-record

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

CVSS 2.0 · 5.0 Medium EPSS 37.2% KEV · Not listed

Vendors

Redhat Squid-cache

Products

Enterprise Linux Squid