Lucene search

[email protected]CVE-2016-4052

HistoryApr 25, 2016 - 2:59 p.m.

CVE-2016-4052

2016-04-2514:59:03

CWE-119

[email protected]

web.nvd.nist.gov

cve-2016-4052

buffer overflow

squid

denial of service

remote code execution

nvd

esi

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

JSON

Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.

Affected configurations

NVD

Node

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch15.10

canonicalubuntu_linuxMatch16.04lts

Node

squid-cachesquidMatch3.0

squid-cachesquidMatch3.1

squid-cachesquidMatch3.1.0.1

squid-cachesquidMatch3.1.0.2

squid-cachesquidMatch3.1.0.3

squid-cachesquidMatch3.1.0.4

squid-cachesquidMatch3.1.0.5

squid-cachesquidMatch3.1.0.6

squid-cachesquidMatch3.1.0.7

squid-cachesquidMatch3.1.0.8

squid-cachesquidMatch3.1.0.9

squid-cachesquidMatch3.1.0.10

squid-cachesquidMatch3.1.0.11

squid-cachesquidMatch3.1.0.12

squid-cachesquidMatch3.1.0.13

squid-cachesquidMatch3.1.0.14

squid-cachesquidMatch3.1.0.15

squid-cachesquidMatch3.1.0.16

squid-cachesquidMatch3.1.0.17

squid-cachesquidMatch3.1.0.18

squid-cachesquidMatch3.1.1

squid-cachesquidMatch3.1.2

squid-cachesquidMatch3.1.3

squid-cachesquidMatch3.1.4

squid-cachesquidMatch3.1.5

squid-cachesquidMatch3.1.5.1

squid-cachesquidMatch3.1.6

squid-cachesquidMatch3.1.7

squid-cachesquidMatch3.1.8

squid-cachesquidMatch3.1.9

squid-cachesquidMatch3.1.10

squid-cachesquidMatch3.1.11

squid-cachesquidMatch3.1.12

squid-cachesquidMatch3.1.12.1

squid-cachesquidMatch3.1.12.2

squid-cachesquidMatch3.1.12.3

squid-cachesquidMatch3.1.13

squid-cachesquidMatch3.1.14

squid-cachesquidMatch3.1.15

squid-cachesquidMatch3.1.16

squid-cachesquidMatch3.1.17

squid-cachesquidMatch3.1.18

squid-cachesquidMatch3.1.19

squid-cachesquidMatch3.1.20

squid-cachesquidMatch3.1.21

squid-cachesquidMatch3.1.22

squid-cachesquidMatch3.2.0.1

squid-cachesquidMatch3.2.0.2

squid-cachesquidMatch3.2.0.3

squid-cachesquidMatch3.2.0.4

squid-cachesquidMatch3.2.0.5

squid-cachesquidMatch3.2.0.6

squid-cachesquidMatch3.2.0.7

squid-cachesquidMatch3.2.0.8

squid-cachesquidMatch3.2.0.9

squid-cachesquidMatch3.2.0.10

squid-cachesquidMatch3.2.0.11

squid-cachesquidMatch3.2.0.12

squid-cachesquidMatch3.2.0.13

squid-cachesquidMatch3.2.0.14

squid-cachesquidMatch3.2.0.15

squid-cachesquidMatch3.2.0.16

squid-cachesquidMatch3.2.0.17

squid-cachesquidMatch3.2.0.18

squid-cachesquidMatch3.2.0.19

squid-cachesquidMatch3.2.1

squid-cachesquidMatch3.2.2

squid-cachesquidMatch3.2.3

squid-cachesquidMatch3.2.4

squid-cachesquidMatch3.2.5

squid-cachesquidMatch3.2.6

squid-cachesquidMatch3.2.7

squid-cachesquidMatch3.2.8

squid-cachesquidMatch3.2.9

squid-cachesquidMatch3.2.10

squid-cachesquidMatch3.2.11

squid-cachesquidMatch3.2.12

squid-cachesquidMatch3.2.13

squid-cachesquidMatch3.3.0

squid-cachesquidMatch3.3.0.1

squid-cachesquidMatch3.3.0.2

squid-cachesquidMatch3.3.0.3

squid-cachesquidMatch3.3.1

squid-cachesquidMatch3.3.2

squid-cachesquidMatch3.3.3

squid-cachesquidMatch3.3.4

squid-cachesquidMatch3.3.5

squid-cachesquidMatch3.3.6

squid-cachesquidMatch3.3.7

squid-cachesquidMatch3.3.8

squid-cachesquidMatch3.3.9

squid-cachesquidMatch3.3.10

squid-cachesquidMatch3.3.11

squid-cachesquidMatch3.3.12

squid-cachesquidMatch3.3.13

squid-cachesquidMatch3.3.14

squid-cachesquidMatch3.4.0.1

squid-cachesquidMatch3.4.0.2

squid-cachesquidMatch3.4.0.3

squid-cachesquidMatch3.4.1

squid-cachesquidMatch3.4.2

squid-cachesquidMatch3.4.3

squid-cachesquidMatch3.4.4

squid-cachesquidMatch3.4.4.1

squid-cachesquidMatch3.4.4.2

squid-cachesquidMatch3.4.8

squid-cachesquidMatch3.4.9

squid-cachesquidMatch3.4.10

squid-cachesquidMatch3.4.11

squid-cachesquidMatch3.4.12

squid-cachesquidMatch3.4.13

squid-cachesquidMatch3.4.14

squid-cachesquidMatch3.5.0.1

squid-cachesquidMatch3.5.0.2

squid-cachesquidMatch3.5.0.3

squid-cachesquidMatch3.5.0.4

squid-cachesquidMatch3.5.1

squid-cachesquidMatch3.5.2

squid-cachesquidMatch3.5.3

squid-cachesquidMatch3.5.4

squid-cachesquidMatch3.5.5

squid-cachesquidMatch3.5.6

squid-cachesquidMatch3.5.7

squid-cachesquidMatch3.5.8

squid-cachesquidMatch3.5.9

squid-cachesquidMatch3.5.10

squid-cachesquidMatch3.5.11

squid-cachesquidMatch3.5.12

squid-cachesquidMatch3.5.13

squid-cachesquidMatch3.5.14

squid-cachesquidMatch3.5.15

squid-cachesquidMatch3.5.16

squid-cachesquidMatch4.0.1

squid-cachesquidMatch4.0.2

squid-cachesquidMatch4.0.3

squid-cachesquidMatch4.0.4

squid-cachesquidMatch4.0.5

squid-cachesquidMatch4.0.6

squid-cachesquidMatch4.0.7

squid-cachesquidMatch4.0.8

CPENameOperatorVersion
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq15.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq16.04

CPE	Name	Operator	Version
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	15.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	16.04