Lucene search

K
redhatcveRedhat.comRH:CVE-2016-4554
HistoryMay 09, 2016 - 9:18 a.m.

CVE-2016-4554

2016-05-0909:18:25
redhat.com
access.redhat.com
11

An input validation flaw was found in Squid’s mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.