3 matches found
CVE-2016-4053
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes ESI responses, related to incorrect use of assert and compiler optimization...
CVE-2016-4053: Improper Restriction of Operations within the Bounds of a Memory Buffer
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes ESI responses, related to incorrect use of assert and compiler optimization...
PT-2016-5824
Name of the Vulnerable Software and Affected Versions Squid versions 3.x through 3.5.16 Squid versions 4.x through 4.0.8 Description The issue allows remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes ESI responses. This is related to the incorrect use of...