CVE-2016-3948

EPSS 35.27%
Veröffentlicht 07.04.2016 18:59:01
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 12

NVD 158 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Squid-cache ≫ Squid Version 3.0

Squid-cache ≫ Squid Version 3.0 Update - Edition pre1

Squid-cache ≫ Squid Version 3.0 Update - Edition pre2

Squid-cache ≫ Squid Version 3.0 Update - Edition pre3

Squid-cache ≫ Squid Version 3.0 Update - Edition pre4

Squid-cache ≫ Squid Version 3.0 Update - Edition pre5

Squid-cache ≫ Squid Version 3.0 Update - Edition pre6

Squid-cache ≫ Squid Version 3.0 Update - Edition pre7

Squid-cache ≫ Squid Version 3.0 Update rc4

Squid-cache ≫ Squid Version 3.0.stable1

Squid-cache ≫ Squid Version 3.0.stable2

Squid-cache ≫ Squid Version 3.0.stable3

Squid-cache ≫ Squid Version 3.0.stable4

Squid-cache ≫ Squid Version 3.0.stable5

Squid-cache ≫ Squid Version 3.0.stable6

Squid-cache ≫ Squid Version 3.0.stable7

Squid-cache ≫ Squid Version 3.0.stable8

Squid-cache ≫ Squid Version 3.0.stable9

Squid-cache ≫ Squid Version 3.0.stable10

Squid-cache ≫ Squid Version 3.0.stable11

Squid-cache ≫ Squid Version 3.0.stable11 Update rc1

Squid-cache ≫ Squid Version 3.0.stable12

Squid-cache ≫ Squid Version 3.0.stable13

Squid-cache ≫ Squid Version 3.0.stable14

Squid-cache ≫ Squid Version 3.0.stable15

Squid-cache ≫ Squid Version 3.0.stable16

Squid-cache ≫ Squid Version 3.0.stable16 Update rc1

Squid-cache ≫ Squid Version 3.0.stable17

Squid-cache ≫ Squid Version 3.0.stable18

Squid-cache ≫ Squid Version 3.0.stable19

Squid-cache ≫ Squid Version 3.0.stable20

Squid-cache ≫ Squid Version 3.0.stable21

Squid-cache ≫ Squid Version 3.0.stable22

Squid-cache ≫ Squid Version 3.0.stable23

Squid-cache ≫ Squid Version 3.0.stable24

Squid-cache ≫ Squid Version 3.0.stable25

Squid-cache ≫ Squid Version 3.1

Squid-cache ≫ Squid Version 3.1.0.1

Squid-cache ≫ Squid Version 3.1.0.2

Squid-cache ≫ Squid Version 3.1.0.3

Squid-cache ≫ Squid Version 3.1.0.4

Squid-cache ≫ Squid Version 3.1.0.5

Squid-cache ≫ Squid Version 3.1.0.6

Squid-cache ≫ Squid Version 3.1.0.7

Squid-cache ≫ Squid Version 3.1.0.8

Squid-cache ≫ Squid Version 3.1.0.9

Squid-cache ≫ Squid Version 3.1.0.10

Squid-cache ≫ Squid Version 3.1.0.11

Squid-cache ≫ Squid Version 3.1.0.12

Squid-cache ≫ Squid Version 3.1.0.13

Squid-cache ≫ Squid Version 3.1.0.14

Squid-cache ≫ Squid Version 3.1.0.15

Squid-cache ≫ Squid Version 3.1.0.16

Squid-cache ≫ Squid Version 3.1.0.17

Squid-cache ≫ Squid Version 3.1.0.18

Squid-cache ≫ Squid Version 3.1.1

Squid-cache ≫ Squid Version 3.1.2

Squid-cache ≫ Squid Version 3.1.3

Squid-cache ≫ Squid Version 3.1.4

Squid-cache ≫ Squid Version 3.1.5

Squid-cache ≫ Squid Version 3.1.5.1

Squid-cache ≫ Squid Version 3.1.6

Squid-cache ≫ Squid Version 3.1.7

Squid-cache ≫ Squid Version 3.1.8

Squid-cache ≫ Squid Version 3.1.9

Squid-cache ≫ Squid Version 3.1.10

Squid-cache ≫ Squid Version 3.1.11

Squid-cache ≫ Squid Version 3.1.12

Squid-cache ≫ Squid Version 3.1.13

Squid-cache ≫ Squid Version 3.1.14

Squid-cache ≫ Squid Version 3.1.15

Squid-cache ≫ Squid Version 3.2.0.1

Squid-cache ≫ Squid Version 3.2.0.2

Squid-cache ≫ Squid Version 3.2.0.3

Squid-cache ≫ Squid Version 3.2.0.4

Squid-cache ≫ Squid Version 3.2.0.5

Squid-cache ≫ Squid Version 3.2.0.6

Squid-cache ≫ Squid Version 3.2.0.7

Squid-cache ≫ Squid Version 3.2.0.8

Squid-cache ≫ Squid Version 3.2.0.9

Squid-cache ≫ Squid Version 3.2.0.10

Squid-cache ≫ Squid Version 3.2.0.11

Squid-cache ≫ Squid Version 3.2.0.12

Squid-cache ≫ Squid Version 3.2.0.13

Squid-cache ≫ Squid Version 3.2.0.14

Squid-cache ≫ Squid Version 3.2.0.15

Squid-cache ≫ Squid Version 3.2.0.16

Squid-cache ≫ Squid Version 3.2.0.17

Squid-cache ≫ Squid Version 3.2.0.18

Squid-cache ≫ Squid Version 3.2.0.19

Squid-cache ≫ Squid Version 3.2.1

Squid-cache ≫ Squid Version 3.2.2

Squid-cache ≫ Squid Version 3.2.3

Squid-cache ≫ Squid Version 3.2.4

Squid-cache ≫ Squid Version 3.2.5

Squid-cache ≫ Squid Version 3.2.6

Squid-cache ≫ Squid Version 3.2.7

Squid-cache ≫ Squid Version 3.2.8

Squid-cache ≫ Squid Version 3.2.9

Squid-cache ≫ Squid Version 3.2.10

Squid-cache ≫ Squid Version 3.2.11

Squid-cache ≫ Squid Version 3.2.12

Squid-cache ≫ Squid Version 3.2.13

Squid-cache ≫ Squid Version 3.3.0

Squid-cache ≫ Squid Version 3.3.0.2

Squid-cache ≫ Squid Version 3.3.0.3

Squid-cache ≫ Squid Version 3.3.1

Squid-cache ≫ Squid Version 3.3.2

Squid-cache ≫ Squid Version 3.3.3

Squid-cache ≫ Squid Version 3.3.4

Squid-cache ≫ Squid Version 3.3.5

Squid-cache ≫ Squid Version 3.3.6

Squid-cache ≫ Squid Version 3.3.7

Squid-cache ≫ Squid Version 3.3.8

Squid-cache ≫ Squid Version 3.3.9

Squid-cache ≫ Squid Version 3.3.10

Squid-cache ≫ Squid Version 3.3.11

Squid-cache ≫ Squid Version 3.3.12

Squid-cache ≫ Squid Version 3.3.13

Squid-cache ≫ Squid Version 3.4.0.1

Squid-cache ≫ Squid Version 3.4.0.2

Squid-cache ≫ Squid Version 3.4.0.3

Squid-cache ≫ Squid Version 3.4.1

Squid-cache ≫ Squid Version 3.4.2

Squid-cache ≫ Squid Version 3.4.3

Squid-cache ≫ Squid Version 3.4.4

Squid-cache ≫ Squid Version 3.4.8

Squid-cache ≫ Squid Version 3.4.9

Squid-cache ≫ Squid Version 3.4.10

Squid-cache ≫ Squid Version 3.4.11

Squid-cache ≫ Squid Version 3.4.12

Squid-cache ≫ Squid Version 3.4.13

Squid-cache ≫ Squid Version 3.5.0.1

Squid-cache ≫ Squid Version 3.5.0.2

Squid-cache ≫ Squid Version 3.5.0.3

Squid-cache ≫ Squid Version 3.5.0.4

Squid-cache ≫ Squid Version 3.5.1

Squid-cache ≫ Squid Version 3.5.2

Squid-cache ≫ Squid Version 3.5.3

Squid-cache ≫ Squid Version 3.5.4

Squid-cache ≫ Squid Version 3.5.5

Squid-cache ≫ Squid Version 3.5.6

Squid-cache ≫ Squid Version 3.5.7

Squid-cache ≫ Squid Version 3.5.8

Squid-cache ≫ Squid Version 3.5.9

Squid-cache ≫ Squid Version 3.5.10

Squid-cache ≫ Squid Version 3.5.11

Squid-cache ≫ Squid Version 3.5.12

Squid-cache ≫ Squid Version 3.5.13

Squid-cache ≫ Squid Version 3.5.14

Squid-cache ≫ Squid Version 3.5.15

Squid-cache ≫ Squid Version 4.0.1

Squid-cache ≫ Squid Version 4.0.2

Squid-cache ≫ Squid Version 4.0.3

Squid-cache ≫ Squid Version 4.0.4

Squid-cache ≫ Squid Version 4.0.5

Squid-cache ≫ Squid Version 4.0.6

Squid-cache ≫ Squid Version 4.0.7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	35.27%	0.982

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html

https://security.gentoo.org/glsa/201607-01

http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html

http://rhn.redhat.com/errata/RHSA-2016-2600.html

https://usn.ubuntu.com/3557-1/

http://www.securitytracker.com/id/1035458

http://www.squid-cache.org/Advisories/SQUID-2016_4.txt

Vendor Advisory

http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14016.patch

Patch

https://nvd.nist.gov/vuln/detail/CVE-2016-3948