CVE-2016-10002

2017-01-2717:59:00

Alpine Linux Development Team

security.alpinelinux.org

0.005 Low

EPSS

Percentile

75.3%

JSON

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.

OSVersionArchitecturePackageVersionFilename
Alpine3.2-mainnoarchsquid< 3.5.23-r0UNKNOWN
Alpine3.3-mainnoarchsquid< 3.5.23-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.2-main	noarch	squid	< 3.5.23-r0	UNKNOWN
Alpine	3.3-main	noarch	squid	< 3.5.23-r0	UNKNOWN

0.005 Low

EPSS

Percentile

75.3%

JSON

Related for ALPINE:CVE-2016-10002