Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2016-4053
Vulnerability from cvelistv5
Published
2016-04-25 14:00
Modified
2024-08-06 00:17
Severity ?
EPSS score ?
Summary
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T00:17:30.656Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { name: "GLSA-201607-01", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/201607-01", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { name: "SUSE-SU-2016:1996", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { name: "[oss-security] 20160421 CVE Request: Squid HTTP Caching Proxy multiple issues", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { name: "USN-2995-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred", ], url: "http://www.ubuntu.com/usn/USN-2995-1", }, { name: "RHSA-2016:1140", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { name: "openSUSE-SU-2016:2081", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { name: "RHSA-2016:1138", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { name: "91787", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/91787", }, { name: "RHSA-2016:1139", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { name: "SUSE-SU-2016:2089", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { name: "[oss-security] 20160420 Re: CVE Request: Squid HTTP Caching Proxy multiple issues", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { name: "1035647", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1035647", }, { name: "DSA-3625", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2016/dsa-3625", }, { name: "86788", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/86788", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2016-04-20T00:00:00", descriptions: [ { lang: "en", value: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2016-11-28T20:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { name: "GLSA-201607-01", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/201607-01", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { name: "SUSE-SU-2016:1996", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { name: "[oss-security] 20160421 CVE Request: Squid HTTP Caching Proxy multiple issues", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { name: "USN-2995-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", ], url: "http://www.ubuntu.com/usn/USN-2995-1", }, { name: "RHSA-2016:1140", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { name: "openSUSE-SU-2016:2081", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { name: "RHSA-2016:1138", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { name: "91787", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/91787", }, { name: "RHSA-2016:1139", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { name: "SUSE-SU-2016:2089", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { name: "[oss-security] 20160420 Re: CVE Request: Squid HTTP Caching Proxy multiple issues", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { name: "1035647", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1035647", }, { name: "DSA-3625", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2016/dsa-3625", }, { name: "86788", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/86788", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2016-4053", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", refsource: "CONFIRM", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { name: "GLSA-201607-01", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201607-01", }, { name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { name: "SUSE-SU-2016:1996", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { name: "[oss-security] 20160421 CVE Request: Squid HTTP Caching Proxy multiple issues", refsource: "MLIST", url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { name: "USN-2995-1", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-2995-1", }, { name: "RHSA-2016:1140", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { name: "openSUSE-SU-2016:2081", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { name: "RHSA-2016:1138", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { name: "91787", refsource: "BID", url: "http://www.securityfocus.com/bid/91787", }, { name: "RHSA-2016:1139", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { name: "SUSE-SU-2016:2089", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { name: "[oss-security] 20160420 Re: CVE Request: Squid HTTP Caching Proxy multiple issues", refsource: "MLIST", url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { name: "1035647", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1035647", }, { name: "DSA-3625", refsource: "DEBIAN", url: "http://www.debian.org/security/2016/dsa-3625", }, { name: "86788", refsource: "BID", url: "http://www.securityfocus.com/bid/86788", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2016-4053", datePublished: "2016-04-25T14:00:00", dateReserved: "2016-04-20T00:00:00", dateUpdated: "2024-08-06T00:17:30.656Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { fkie_nvd: { configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"62B9F669-6217-498A-902E-22EDEEFC565E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A8586AD-E820-4BAE-AAF9-AC7EF2316C06\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"802E3D2B-90B7-4725-854F-4174116BC314\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7501697A-BCFD-4DC3-8D87-CC9A186D9589\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0D6C4455-85F4-462D-9FF6-F830ED7D398E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B600BF4C-8169-4086-BFE6-F066BE5F5406\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"46272D1B-1468-48C0-B37A-7D06FAC39C47\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DA782B4B-486F-4197-BD5D-ABF791D57211\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"558D8641-E097-4D91-9B6E-07433844BB82\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B46F5F1-38FC-4E25-8F04-CA2730561DF8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C69B0A4D-9619-4BEA-A846-C4438C2660F2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED17FE35-6B2C-41BF-A7C7-2EECBDB5A934\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"78A50750-3A31-482C-B95C-019C8934850E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8FF6AC30-9570-4D4B-835E-CCADEB546F46\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7FB84E4E-6A0A-41C8-9DDF-3C18F526F155\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E49E5C3-D01F-4DBC-B33A-5495D3EC44F8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"79C53B22-9F33-43E7-8D1F-EEB0DEF4B503\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"25B60DB2-F50C-42F0-B6C9-B25C34B8F578\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DE973F9E-8387-464F-AFA0-25215B340173\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"03D3F0E3-0C50-4A86-87F4-90FC82B312F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CE26BEC0-B9C7-43F0-B0FB-E81870170B29\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0778579-A193-4C61-BB1A-6D2E733F3958\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9ED5DC63-6E9D-4068-95DF-AF8FD9A0A7ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8DE890F9-12C0-4D66-B6C1-6A5A87FAD5F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB414FE3-3567-474B-B5A7-D3EF5DD63AB8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AF450F17-12A2-4E33-875A-5F3C2CA4A5C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E3AB229E-2C32-410B-BFE2-62DCA734C3F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"78A6D6B0-9BC0-418E-84EE-23697A0FEC19\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5BF7AFE1-A45A-43B7-B3C7-45C060D046BC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"41914354-D5BE-4B1F-BED3-0ECA43586537\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE9A3716-8670-4847-A6EB-F601184D369E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0E88EE3-EC00-4F1F-BAEF-4F1F893C5C5F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A330DFA8-BF79-45CC-BF88-6CEA26D7BC9E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.12.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B218819-0975-4E1F-8F6C-D666655937B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.12.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"594A05FF-E5D2-4132-BF03-44D6866D8133\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.12.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B22C192-02F2-4AD4-A305-BADCC09E8075\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"679A55F8-34B4-435A-8BCE-8F842F3FB269\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"898674F9-6BF7-469F-A74E-558EAFC2CD27\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3F50E718-1CF2-4C8F-A1EA-5F769B203B8A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"290D66F4-D27F-4E86-AC95-05082F3C2E36\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A8CD6A42-2C79-48EB-8F6C-0A7CE0C6AAAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABBA9A61-2B05-4527-A49D-425AD5FD863B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E893D7A8-9C39-438C-8EF2-9573EEDC884A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B707451-BF0E-4F79-A348-B1141ABA6EF8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"810AAA9D-F4B2-4F0A-89DD-2D9378516481\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"516F3F77-3AEA-489D-A36F-C502B4D9BF01\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6DFAB3BA-BBE9-4CFB-BE6B-BDF3E7772E7F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C9F523B8-463E-4FB0-ACB6-E36AAAF85CD9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5BA593D9-907D-4051-A3F2-0F88F01A7C79\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"20D2B364-B98A-4484-A10A-86AF43774096\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B7BF076-0D43-407A-86DC-D1163922A787\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AA576F49-A7F5-4013-89DF-F6C91C15B547\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D3F52FE-FFB3-4221-8DC7-3F5680A07429\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"604FEF42-ABA7-42C1-8A5F-C3AECFD68481\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DC2568C1-89CB-41C1-9126-A8665614D0B1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C18B5392-3FDB-49E6-89DB-7945D337FBFB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BA9E0E7F-E93C-4DE9-8D91-5EE50BCFAC2A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0BFF9D8B-343B-415D-8AF8-B07AF94CC48B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16F5794B-BBFB-4B12-9A0B-88A0334681C7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"17D0083E-8D50-4DC6-979F-685D5CB588AF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"138FAD73-1D25-4F46-B9EA-599FF0EDA1AA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2CE34DC1-F654-474E-B6A3-D81B9BF4D6CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8A4BF7AC-7D9F-40D8-A5AA-BE1EBF37CF96\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"643E8B9B-C3F4-4171-BF67-D9359BDCE5CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A73CBC60-1EF1-4730-9350-EB51F269695B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2721E403-A553-492F-897F-1CD1E2685139\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"85B091C4-8104-4A1E-A09D-EBCD114DC829\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA2EDF9C-45AD-4980-8DEF-C7F473B22CAF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE4B8448-49FA-491C-A6A2-040233D670B1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"11480BB1-874C-48EB-BB03-081313310608\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B739890-99E8-434C-97D4-3739E6C31838\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C7B1871-3C85-4B88-AB42-E60BF5CDFB04\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A71DCD2-0E54-46A7-8309-CDB0736AD5C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CD54BDDF-F7A8-4715-BA0E-4E7F741492FE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9A2B9699-6622-4883-BA03-E3374C54871A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"78391DAF-2096-4DC4-80E4-D4D2859DCA32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B062A06-31C1-4B23-B7BD-9F751ABD6A37\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.2.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DE426934-A9E2-4019-99EA-5A76EA7CDF5C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"728DD64E-C267-475A-BEA8-C139581DD7A7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7A83183-74B1-4041-A961-D9F382AAC7E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4CE8F3F5-45A2-418A-9D8E-4E6DFC888BC6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F4845D4-40D9-431E-A63C-E949B9D9F959\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EF070E6-0B73-4F6D-8932-B284697FCD2E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E07992B-92B4-4307-8DBD-085376C1D6DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"386550A3-A55B-4F24-9625-6A50260ADA72\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"810D1F9E-81E5-45F0-B62B-AB0A797FF8B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4673327A-1E50-47CC-AD83-6A3D2E687292\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6624AF2D-9EF0-4597-B8B2-20D7A309EA6F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E9F75D13-ED59-42A9-A662-AC77DBA20903\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D2DEDED-818C-42E4-821C-954CE7406DA8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EEED0A2E-AA5D-4835-A7C6-499325A0EB32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BEDD0AF5-8252-4548-941B-26581393E918\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3E939AD4-B8F3-4BC0-9948-3C92B88D2593\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73CAD438-969B-4D2E-8A2F-9264AFAD9DE2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87259A2E-E132-45BA-8AC4-8CC50B1F659A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.3.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"76245991-1D91-4475-87E1-FBB77A1B3CDF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1DD85E57-9A51-42DF-8BF7-E5701BAA64AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E983C5C3-C93C-4750-8DC5-31D6206335A8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEC8D212-6E8B-45F7-B7FB-9FFA64C1DB8F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F03B2A6E-1D63-42F2-BB31-18EC120B6543\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3BC83C4B-7C06-40D7-9EF6-76E752E5724B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C1E1CC9-81A7-47D5-87AC-86703E257D29\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D716D8C4-2089-4E61-9487-B2085B74B5BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1BBC5AAD-34E1-48A5-972A-A09D66EFE825\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"79E26DC8-1030-4F3F-96B9-6BF159D86FCE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"40507A48-FD3B-4309-B017-A1644C5C3520\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0211EBCA-144F-4BDD-8F0C-E5F7BDF96E7A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7A52E699-6C08-4324-AD38-E8D40A02701F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"94C493CA-CBF0-4D15-8D1A-0E972E31F7A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C398219E-503D-4DE5-85E8-5570536D6FB9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BBF91088-0BD3-48EB-8D19-C05F156D4A19\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.4.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3441D193-DA62-4AC1-8E50-3AEEF8C659F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E0868B12-EDF9-42D9-BB43-15F623A3310B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F710949D-F0FE-43F4-ADB3-6EB679A70280\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCB75144-2437-40A8-8CA3-A487B603F7DE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6CED2CB3-BE78-4818-A6D7-847A1ACE74DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"705D8320-A278-483A-AE47-802044CE685E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"715634E1-F7BE-4106-BDA7-B7D147EEA800\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21E9E155-FC6F-46E7-8BF7-65DF097409D3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF72FA7A-E35D-4000-9DDA-71E55EA3A4D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"26A3F10F-938E-44D6-845D-B66EF9812C21\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B1D82EEE-F65E-4657-B0F7-6CE33D219134\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C9E6A845-B67C-4112-8240-9F61D6AF3B0D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BEDD7E3-E263-4A09-9C11-3E008E01BC28\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E3FF16-A6CD-456C-B58A-381A75D8616C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87D02AB2-AA26-4416-B689-02C5EEF2099C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A134E1F1-AFCC-498B-8840-5884CF858769\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5F4E7D0-B6F4-476E-A011-55619E91A3B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"95588755-27E8-4DB7-B865-A784D3638FE8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2CD4DDBC-4243-459A-B43D-FF8F0AE0BA3C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F90E11F-FC03-46D9-A9C4-A578196D59D8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:3.5.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EDC9BEE2-D7E4-4192-963C-E9F2364FC8CE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"060FCBEA-DEAA-42FB-88C9-4B78136B172F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"74987102-8CA8-4120-B686-F18579A96A46\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DA7828AA-48B6-44CD-8507-345A4F0A25BC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6640F25F-CC8B-4B05-A97A-2186BD0B5ED8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A037F780-6FC9-4130-908F-B5434FA0C7DE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1DDEB455-F082-44E4-8CEA-019C0084BF05\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"49555803-288E-4B0A-B12A-890E5E0AD05F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EBEE374C-365E-49DE-A9F9-6083044C774D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC7A498A-A669-4C42-8134-86103C799D13\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"104DA87B-DEE4-4262-AE50-8E6BC43B228B\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"B5A6F2F3-4894-4392-8296-3B8DD2679084\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E88A537F-F4D0-46B9-9E37-965233C2A355\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"}]}]}]", descriptions: "[{\"lang\": \"en\", \"value\": \"Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.\"}, {\"lang\": \"es\", \"value\": \"Squid 3.x en versiones anteriores a 3.5.17 y 4.x en versiones anteriores a 4.0.9 permite a atacantes remotos obtener informaci\\u00f3n sensible sobre la estructura de pila a trav\\u00e9s de respuestas Edge Side Includes (ESI) manipuladas, relacionado con el uso incorrecto de assert y optimizaci\\u00f3n del compilador.\"}]", id: "CVE-2016-4053", lastModified: "2024-11-21T02:51:14.910", metrics: "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N\", \"baseScore\": 3.7, \"baseSeverity\": \"LOW\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 1.4}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:N/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", published: "2016-04-25T14:59:04.533", references: "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2016/dsa-3625\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2016/04/20/6\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2016/04/20/9\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/86788\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/91787\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1035647\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.squid-cache.org/Advisories/SQUID-2016_6.txt\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2995-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2016:1138\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2016:1139\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2016:1140\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://security.gentoo.org/glsa/201607-01\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2016/dsa-3625\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2016/04/20/6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2016/04/20/9\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/86788\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/91787\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1035647\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.squid-cache.org/Advisories/SQUID-2016_6.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2995-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2016:1138\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2016:1139\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2016:1140\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/201607-01\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]", sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]", }, nvd: "{\"cve\":{\"id\":\"CVE-2016-4053\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2016-04-25T14:59:04.533\",\"lastModified\":\"2024-11-21T02:51:14.910\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.\"},{\"lang\":\"es\",\"value\":\"Squid 3.x en versiones anteriores a 3.5.17 y 4.x en versiones anteriores a 4.0.9 permite a atacantes remotos obtener información sensible sobre la estructura de pila a través de respuestas Edge Side Includes (ESI) manipuladas, relacionado con el uso incorrecto de assert y optimización del compilador.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":3.7,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62B9F669-6217-498A-902E-22EDEEFC565E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A8586AD-E820-4BAE-AAF9-AC7EF2316C06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"802E3D2B-90B7-4725-854F-4174116BC314\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7501697A-BCFD-4DC3-8D87-CC9A186D9589\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D6C4455-85F4-462D-9FF6-F830ED7D398E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B600BF4C-8169-4086-BFE6-F066BE5F5406\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46272D1B-1468-48C0-B37A-7D06FAC39C47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA782B4B-486F-4197-BD5D-ABF791D57211\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"558D8641-E097-4D91-9B6E-07433844BB82\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B46F5F1-38FC-4E25-8F04-CA2730561DF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C69B0A4D-9619-4BEA-A846-C4438C2660F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED17FE35-6B2C-41BF-A7C7-2EECBDB5A934\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78A50750-3A31-482C-B95C-019C8934850E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FF6AC30-9570-4D4B-835E-CCADEB546F46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FB84E4E-6A0A-41C8-9DDF-3C18F526F155\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E49E5C3-D01F-4DBC-B33A-5495D3EC44F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79C53B22-9F33-43E7-8D1F-EEB0DEF4B503\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25B60DB2-F50C-42F0-B6C9-B25C34B8F578\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE973F9E-8387-464F-AFA0-25215B340173\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03D3F0E3-0C50-4A86-87F4-90FC82B312F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE26BEC0-B9C7-43F0-B0FB-E81870170B29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0778579-A193-4C61-BB1A-6D2E733F3958\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9ED5DC63-6E9D-4068-95DF-AF8FD9A0A7ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DE890F9-12C0-4D66-B6C1-6A5A87FAD5F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB414FE3-3567-474B-B5A7-D3EF5DD63AB8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF450F17-12A2-4E33-875A-5F3C2CA4A5C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3AB229E-2C32-410B-BFE2-62DCA734C3F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78A6D6B0-9BC0-418E-84EE-23697A0FEC19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BF7AFE1-A45A-43B7-B3C7-45C060D046BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41914354-D5BE-4B1F-BED3-0ECA43586537\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE9A3716-8670-4847-A6EB-F601184D369E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0E88EE3-EC00-4F1F-BAEF-4F1F893C5C5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A330DFA8-BF79-45CC-BF88-6CEA26D7BC9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B218819-0975-4E1F-8F6C-D666655937B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"594A05FF-E5D2-4132-BF03-44D6866D8133\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.12.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B22C192-02F2-4AD4-A305-BADCC09E8075\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"679A55F8-34B4-435A-8BCE-8F842F3FB269\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"898674F9-6BF7-469F-A74E-558EAFC2CD27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F50E718-1CF2-4C8F-A1EA-5F769B203B8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"290D66F4-D27F-4E86-AC95-05082F3C2E36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8CD6A42-2C79-48EB-8F6C-0A7CE0C6AAAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABBA9A61-2B05-4527-A49D-425AD5FD863B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E893D7A8-9C39-438C-8EF2-9573EEDC884A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B707451-BF0E-4F79-A348-B1141ABA6EF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"810AAA9D-F4B2-4F0A-89DD-2D9378516481\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"516F3F77-3AEA-489D-A36F-C502B4D9BF01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DFAB3BA-BBE9-4CFB-BE6B-BDF3E7772E7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9F523B8-463E-4FB0-ACB6-E36AAAF85CD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BA593D9-907D-4051-A3F2-0F88F01A7C79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20D2B364-B98A-4484-A10A-86AF43774096\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B7BF076-0D43-407A-86DC-D1163922A787\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA576F49-A7F5-4013-89DF-F6C91C15B547\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D3F52FE-FFB3-4221-8DC7-3F5680A07429\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"604FEF42-ABA7-42C1-8A5F-C3AECFD68481\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC2568C1-89CB-41C1-9126-A8665614D0B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C18B5392-3FDB-49E6-89DB-7945D337FBFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA9E0E7F-E93C-4DE9-8D91-5EE50BCFAC2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BFF9D8B-343B-415D-8AF8-B07AF94CC48B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F5794B-BBFB-4B12-9A0B-88A0334681C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17D0083E-8D50-4DC6-979F-685D5CB588AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"138FAD73-1D25-4F46-B9EA-599FF0EDA1AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CE34DC1-F654-474E-B6A3-D81B9BF4D6CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A4BF7AC-7D9F-40D8-A5AA-BE1EBF37CF96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"643E8B9B-C3F4-4171-BF67-D9359BDCE5CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A73CBC60-1EF1-4730-9350-EB51F269695B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2721E403-A553-492F-897F-1CD1E2685139\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85B091C4-8104-4A1E-A09D-EBCD114DC829\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA2EDF9C-45AD-4980-8DEF-C7F473B22CAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE4B8448-49FA-491C-A6A2-040233D670B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11480BB1-874C-48EB-BB03-081313310608\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B739890-99E8-434C-97D4-3739E6C31838\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C7B1871-3C85-4B88-AB42-E60BF5CDFB04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A71DCD2-0E54-46A7-8309-CDB0736AD5C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD54BDDF-F7A8-4715-BA0E-4E7F741492FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A2B9699-6622-4883-BA03-E3374C54871A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78391DAF-2096-4DC4-80E4-D4D2859DCA32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B062A06-31C1-4B23-B7BD-9F751ABD6A37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.2.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE426934-A9E2-4019-99EA-5A76EA7CDF5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"728DD64E-C267-475A-BEA8-C139581DD7A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7A83183-74B1-4041-A961-D9F382AAC7E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4CE8F3F5-45A2-418A-9D8E-4E6DFC888BC6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F4845D4-40D9-431E-A63C-E949B9D9F959\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EF070E6-0B73-4F6D-8932-B284697FCD2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E07992B-92B4-4307-8DBD-085376C1D6DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"386550A3-A55B-4F24-9625-6A50260ADA72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"810D1F9E-81E5-45F0-B62B-AB0A797FF8B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4673327A-1E50-47CC-AD83-6A3D2E687292\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6624AF2D-9EF0-4597-B8B2-20D7A309EA6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9F75D13-ED59-42A9-A662-AC77DBA20903\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D2DEDED-818C-42E4-821C-954CE7406DA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EEED0A2E-AA5D-4835-A7C6-499325A0EB32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BEDD0AF5-8252-4548-941B-26581393E918\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E939AD4-B8F3-4BC0-9948-3C92B88D2593\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73CAD438-969B-4D2E-8A2F-9264AFAD9DE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87259A2E-E132-45BA-8AC4-8CC50B1F659A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.3.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76245991-1D91-4475-87E1-FBB77A1B3CDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DD85E57-9A51-42DF-8BF7-E5701BAA64AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E983C5C3-C93C-4750-8DC5-31D6206335A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEC8D212-6E8B-45F7-B7FB-9FFA64C1DB8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F03B2A6E-1D63-42F2-BB31-18EC120B6543\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BC83C4B-7C06-40D7-9EF6-76E752E5724B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C1E1CC9-81A7-47D5-87AC-86703E257D29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D716D8C4-2089-4E61-9487-B2085B74B5BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BBC5AAD-34E1-48A5-972A-A09D66EFE825\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79E26DC8-1030-4F3F-96B9-6BF159D86FCE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40507A48-FD3B-4309-B017-A1644C5C3520\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0211EBCA-144F-4BDD-8F0C-E5F7BDF96E7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A52E699-6C08-4324-AD38-E8D40A02701F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94C493CA-CBF0-4D15-8D1A-0E972E31F7A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C398219E-503D-4DE5-85E8-5570536D6FB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBF91088-0BD3-48EB-8D19-C05F156D4A19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.4.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3441D193-DA62-4AC1-8E50-3AEEF8C659F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0868B12-EDF9-42D9-BB43-15F623A3310B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F710949D-F0FE-43F4-ADB3-6EB679A70280\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCB75144-2437-40A8-8CA3-A487B603F7DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CED2CB3-BE78-4818-A6D7-847A1ACE74DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"705D8320-A278-483A-AE47-802044CE685E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"715634E1-F7BE-4106-BDA7-B7D147EEA800\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21E9E155-FC6F-46E7-8BF7-65DF097409D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF72FA7A-E35D-4000-9DDA-71E55EA3A4D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26A3F10F-938E-44D6-845D-B66EF9812C21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1D82EEE-F65E-4657-B0F7-6CE33D219134\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9E6A845-B67C-4112-8240-9F61D6AF3B0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BEDD7E3-E263-4A09-9C11-3E008E01BC28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E3FF16-A6CD-456C-B58A-381A75D8616C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87D02AB2-AA26-4416-B689-02C5EEF2099C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A134E1F1-AFCC-498B-8840-5884CF858769\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5F4E7D0-B6F4-476E-A011-55619E91A3B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95588755-27E8-4DB7-B865-A784D3638FE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CD4DDBC-4243-459A-B43D-FF8F0AE0BA3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F90E11F-FC03-46D9-A9C4-A578196D59D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:3.5.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EDC9BEE2-D7E4-4192-963C-E9F2364FC8CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"060FCBEA-DEAA-42FB-88C9-4B78136B172F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"74987102-8CA8-4120-B686-F18579A96A46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA7828AA-48B6-44CD-8507-345A4F0A25BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6640F25F-CC8B-4B05-A97A-2186BD0B5ED8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A037F780-6FC9-4130-908F-B5434FA0C7DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DDEB455-F082-44E4-8CEA-019C0084BF05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49555803-288E-4B0A-B12A-890E5E0AD05F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBEE374C-365E-49DE-A9F9-6083044C774D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC7A498A-A669-4C42-8134-86103C799D13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"104DA87B-DEE4-4262-AE50-8E6BC43B228B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E88A537F-F4D0-46B9-9E37-965233C2A355\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3625\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/04/20/6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/04/20/9\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/86788\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/91787\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1035647\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.squid-cache.org/Advisories/SQUID-2016_6.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2995-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1138\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1139\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1140\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/201607-01\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3625\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/04/20/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/04/20/9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/86788\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/91787\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1035647\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.squid-cache.org/Advisories/SQUID-2016_6.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2995-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1138\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1139\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1140\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201607-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
RHSA-2016:1140
Vulnerability from csaf_redhat
Published
2016-05-31 05:56
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid34 security update
Notes
Topic
An update for squid34 is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The "squid34" packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Note that apart from "squid34", this version of Red Hat Enterprise Linux also includes the "squid" packages which provide Squid version 3.1.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid34 is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "The \"squid34\" packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Note that apart from \"squid34\", this version of Red Hat Enterprise Linux also includes the \"squid\" packages which provide Squid version 3.1.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1140", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1140.json", }, ], title: "Red Hat Security Advisory: squid34 security update", tracking: { current_release_date: "2024-11-22T10:02:47+00:00", generator: { date: "2024-11-22T10:02:47+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1140", initial_release_date: "2016-05-31T05:56:07+00:00", revision_history: [ { date: "2016-05-31T05:56:07+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:56:07+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:47+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.src", product: { name: "squid34-7:3.4.14-9.el6_8.3.src", product_id: "squid34-7:3.4.14-9.el6_8.3.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.x86_64", product: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64", product_id: "squid34-7:3.4.14-9.el6_8.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=i686&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.i686", product: { name: "squid34-7:3.4.14-9.el6_8.3.i686", product_id: "squid34-7:3.4.14-9.el6_8.3.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=i686&epoch=7", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.s390x", product: { name: "squid34-7:3.4.14-9.el6_8.3.s390x", product_id: "squid34-7:3.4.14-9.el6_8.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.ppc64", product: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64", product_id: "squid34-7:3.4.14-9.el6_8.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.src", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.src", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4553", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334233", }, ], notes: [ { category: "description", text: "An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: Cache poisoning issue in HTTP Request handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "RHBZ#1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4553", url: "https://www.cve.org/CVERecord?id=CVE-2016-4553", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Cache poisoning issue in HTTP Request handling", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4555", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334246", }, ], notes: [ { category: "description", text: "A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process.", title: "Vulnerability description", }, { category: "summary", text: "squid: SegFault from ESIInclude::Start", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "RHBZ#1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4555", url: "https://www.cve.org/CVERecord?id=CVE-2016-4555", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SegFault from ESIInclude::Start", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
rhsa-2016_1139
Vulnerability from csaf_redhat
Published
2016-05-31 05:42
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid security update
Notes
Topic
An update for squid is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1139", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1139.json", }, ], title: "Red Hat Security Advisory: squid security update", tracking: { current_release_date: "2024-11-22T10:02:52+00:00", generator: { date: "2024-11-22T10:02:52+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1139", initial_release_date: "2016-05-31T05:42:41+00:00", revision_history: [ { date: "2016-05-31T05:42:41+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:42:41+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:52+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.src", product: { name: "squid-7:3.3.8-26.el7_2.3.src", product_id: "squid-7:3.3.8-26.el7_2.3.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4553", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334233", }, ], notes: [ { category: "description", text: "An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: Cache poisoning issue in HTTP Request handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "RHBZ#1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4553", url: "https://www.cve.org/CVERecord?id=CVE-2016-4553", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Cache poisoning issue in HTTP Request handling", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4555", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334246", }, ], notes: [ { category: "description", text: "A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process.", title: "Vulnerability description", }, { category: "summary", text: "squid: SegFault from ESIInclude::Start", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "RHBZ#1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4555", url: "https://www.cve.org/CVERecord?id=CVE-2016-4555", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SegFault from ESIInclude::Start", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
rhsa-2016:1139
Vulnerability from csaf_redhat
Published
2016-05-31 05:42
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid security update
Notes
Topic
An update for squid is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1139", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1139.json", }, ], title: "Red Hat Security Advisory: squid security update", tracking: { current_release_date: "2024-11-22T10:02:52+00:00", generator: { date: "2024-11-22T10:02:52+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1139", initial_release_date: "2016-05-31T05:42:41+00:00", revision_history: [ { date: "2016-05-31T05:42:41+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:42:41+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:52+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.src", product: { name: "squid-7:3.3.8-26.el7_2.3.src", product_id: "squid-7:3.3.8-26.el7_2.3.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4553", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334233", }, ], notes: [ { category: "description", text: "An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: Cache poisoning issue in HTTP Request handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "RHBZ#1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4553", url: "https://www.cve.org/CVERecord?id=CVE-2016-4553", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Cache poisoning issue in HTTP Request handling", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4555", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334246", }, ], notes: [ { category: "description", text: "A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process.", title: "Vulnerability description", }, { category: "summary", text: "squid: SegFault from ESIInclude::Start", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "RHBZ#1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4555", url: "https://www.cve.org/CVERecord?id=CVE-2016-4555", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SegFault from ESIInclude::Start", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
rhsa-2016_1140
Vulnerability from csaf_redhat
Published
2016-05-31 05:56
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid34 security update
Notes
Topic
An update for squid34 is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The "squid34" packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Note that apart from "squid34", this version of Red Hat Enterprise Linux also includes the "squid" packages which provide Squid version 3.1.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid34 is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "The \"squid34\" packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Note that apart from \"squid34\", this version of Red Hat Enterprise Linux also includes the \"squid\" packages which provide Squid version 3.1.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1140", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1140.json", }, ], title: "Red Hat Security Advisory: squid34 security update", tracking: { current_release_date: "2024-11-22T10:02:47+00:00", generator: { date: "2024-11-22T10:02:47+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1140", initial_release_date: "2016-05-31T05:56:07+00:00", revision_history: [ { date: "2016-05-31T05:56:07+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:56:07+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:47+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.src", product: { name: "squid34-7:3.4.14-9.el6_8.3.src", product_id: "squid34-7:3.4.14-9.el6_8.3.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.x86_64", product: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64", product_id: "squid34-7:3.4.14-9.el6_8.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=i686&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.i686", product: { name: "squid34-7:3.4.14-9.el6_8.3.i686", product_id: "squid34-7:3.4.14-9.el6_8.3.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=i686&epoch=7", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.s390x", product: { name: "squid34-7:3.4.14-9.el6_8.3.s390x", product_id: "squid34-7:3.4.14-9.el6_8.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.ppc64", product: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64", product_id: "squid34-7:3.4.14-9.el6_8.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.src", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.src", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4553", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334233", }, ], notes: [ { category: "description", text: "An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: Cache poisoning issue in HTTP Request handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "RHBZ#1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4553", url: "https://www.cve.org/CVERecord?id=CVE-2016-4553", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Cache poisoning issue in HTTP Request handling", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4555", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334246", }, ], notes: [ { category: "description", text: "A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process.", title: "Vulnerability description", }, { category: "summary", text: "squid: SegFault from ESIInclude::Start", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "RHBZ#1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4555", url: "https://www.cve.org/CVERecord?id=CVE-2016-4555", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SegFault from ESIInclude::Start", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
rhsa-2016:1140
Vulnerability from csaf_redhat
Published
2016-05-31 05:56
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid34 security update
Notes
Topic
An update for squid34 is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The "squid34" packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Note that apart from "squid34", this version of Red Hat Enterprise Linux also includes the "squid" packages which provide Squid version 3.1.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid34 is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "The \"squid34\" packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Note that apart from \"squid34\", this version of Red Hat Enterprise Linux also includes the \"squid\" packages which provide Squid version 3.1.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1140", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1140.json", }, ], title: "Red Hat Security Advisory: squid34 security update", tracking: { current_release_date: "2024-11-22T10:02:47+00:00", generator: { date: "2024-11-22T10:02:47+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1140", initial_release_date: "2016-05-31T05:56:07+00:00", revision_history: [ { date: "2016-05-31T05:56:07+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:56:07+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:47+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.src", product: { name: "squid34-7:3.4.14-9.el6_8.3.src", product_id: "squid34-7:3.4.14-9.el6_8.3.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.x86_64", product: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64", product_id: "squid34-7:3.4.14-9.el6_8.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=i686&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.i686", product: { name: "squid34-7:3.4.14-9.el6_8.3.i686", product_id: "squid34-7:3.4.14-9.el6_8.3.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=i686&epoch=7", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.s390x", product: { name: "squid34-7:3.4.14-9.el6_8.3.s390x", product_id: "squid34-7:3.4.14-9.el6_8.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product_id: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34-debuginfo@3.4.14-9.el6_8.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid34-7:3.4.14-9.el6_8.3.ppc64", product: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64", product_id: "squid34-7:3.4.14-9.el6_8.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid34@3.4.14-9.el6_8.3?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.src", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.src", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", }, product_reference: "squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4553", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334233", }, ], notes: [ { category: "description", text: "An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: Cache poisoning issue in HTTP Request handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "RHBZ#1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4553", url: "https://www.cve.org/CVERecord?id=CVE-2016-4553", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Cache poisoning issue in HTTP Request handling", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4555", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334246", }, ], notes: [ { category: "description", text: "A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process.", title: "Vulnerability description", }, { category: "summary", text: "squid: SegFault from ESIInclude::Start", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "RHBZ#1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4555", url: "https://www.cve.org/CVERecord?id=CVE-2016-4555", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SegFault from ESIInclude::Start", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1140", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Server-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Server-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.src", "6Workstation-6.8.z:squid34-7:3.4.14-9.el6_8.3.x86_64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.i686", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.ppc64", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.s390x", "6Workstation-6.8.z:squid34-debuginfo-7:3.4.14-9.el6_8.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
RHSA-2016:1138
Vulnerability from csaf_redhat
Published
2016-05-31 05:56
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid security update
Notes
Topic
An update for squid is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1138", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1138.json", }, ], title: "Red Hat Security Advisory: squid security update", tracking: { current_release_date: "2024-11-22T10:02:41+00:00", generator: { date: "2024-11-22T10:02:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1138", initial_release_date: "2016-05-31T05:56:15+00:00", revision_history: [ { date: "2016-05-31T05:56:15+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:56:15+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.src", product: { name: "squid-7:3.1.23-16.el6_8.4.src", product_id: "squid-7:3.1.23-16.el6_8.4.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.s390x", product: { name: "squid-7:3.1.23-16.el6_8.4.s390x", product_id: "squid-7:3.1.23-16.el6_8.4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.x86_64", product: { name: "squid-7:3.1.23-16.el6_8.4.x86_64", product_id: "squid-7:3.1.23-16.el6_8.4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=i686&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.i686", product: { name: "squid-7:3.1.23-16.el6_8.4.i686", product_id: "squid-7:3.1.23-16.el6_8.4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=i686&epoch=7", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.ppc64", product: { name: "squid-7:3.1.23-16.el6_8.4.ppc64", product_id: "squid-7:3.1.23-16.el6_8.4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", }, product_reference: "squid-7:3.1.23-16.el6_8.4.src", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", }, product_reference: "squid-7:3.1.23-16.el6_8.4.src", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
rhsa-2016_1138
Vulnerability from csaf_redhat
Published
2016-05-31 05:56
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid security update
Notes
Topic
An update for squid is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1138", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1138.json", }, ], title: "Red Hat Security Advisory: squid security update", tracking: { current_release_date: "2024-11-22T10:02:41+00:00", generator: { date: "2024-11-22T10:02:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1138", initial_release_date: "2016-05-31T05:56:15+00:00", revision_history: [ { date: "2016-05-31T05:56:15+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:56:15+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.src", product: { name: "squid-7:3.1.23-16.el6_8.4.src", product_id: "squid-7:3.1.23-16.el6_8.4.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.s390x", product: { name: "squid-7:3.1.23-16.el6_8.4.s390x", product_id: "squid-7:3.1.23-16.el6_8.4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.x86_64", product: { name: "squid-7:3.1.23-16.el6_8.4.x86_64", product_id: "squid-7:3.1.23-16.el6_8.4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=i686&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.i686", product: { name: "squid-7:3.1.23-16.el6_8.4.i686", product_id: "squid-7:3.1.23-16.el6_8.4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=i686&epoch=7", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.ppc64", product: { name: "squid-7:3.1.23-16.el6_8.4.ppc64", product_id: "squid-7:3.1.23-16.el6_8.4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", }, product_reference: "squid-7:3.1.23-16.el6_8.4.src", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", }, product_reference: "squid-7:3.1.23-16.el6_8.4.src", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
rhsa-2016:1138
Vulnerability from csaf_redhat
Published
2016-05-31 05:56
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid security update
Notes
Topic
An update for squid is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1138", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1138.json", }, ], title: "Red Hat Security Advisory: squid security update", tracking: { current_release_date: "2024-11-22T10:02:41+00:00", generator: { date: "2024-11-22T10:02:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1138", initial_release_date: "2016-05-31T05:56:15+00:00", revision_history: [ { date: "2016-05-31T05:56:15+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:56:15+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.src", product: { name: "squid-7:3.1.23-16.el6_8.4.src", product_id: "squid-7:3.1.23-16.el6_8.4.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.s390x", product: { name: "squid-7:3.1.23-16.el6_8.4.s390x", product_id: "squid-7:3.1.23-16.el6_8.4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.x86_64", product: { name: "squid-7:3.1.23-16.el6_8.4.x86_64", product_id: "squid-7:3.1.23-16.el6_8.4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=i686&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.i686", product: { name: "squid-7:3.1.23-16.el6_8.4.i686", product_id: "squid-7:3.1.23-16.el6_8.4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=i686&epoch=7", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product_id: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.1.23-16.el6_8.4?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.1.23-16.el6_8.4.ppc64", product: { name: "squid-7:3.1.23-16.el6_8.4.ppc64", product_id: "squid-7:3.1.23-16.el6_8.4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.1.23-16.el6_8.4?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", }, product_reference: "squid-7:3.1.23-16.el6_8.4.src", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Server-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", }, product_reference: "squid-7:3.1.23-16.el6_8.4.src", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.i686", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", relates_to_product_reference: "6Workstation-6.8.z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", }, product_reference: "squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", relates_to_product_reference: "6Workstation-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:56:15+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Server-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Server-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.src", "6Workstation-6.8.z:squid-7:3.1.23-16.el6_8.4.x86_64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.i686", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.ppc64", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.s390x", "6Workstation-6.8.z:squid-debuginfo-7:3.1.23-16.el6_8.4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
RHSA-2016:1139
Vulnerability from csaf_redhat
Published
2016-05-31 05:42
Modified
2024-11-22 10:02
Summary
Red Hat Security Advisory: squid security update
Notes
Topic
An update for squid is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)
* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)
* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)
* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)
* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)
* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for squid is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)\n\n* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)\n\n* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)\n\n* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)\n\n* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)\n\n* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:1139", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, { category: "external", summary: "1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1139.json", }, ], title: "Red Hat Security Advisory: squid security update", tracking: { current_release_date: "2024-11-22T10:02:52+00:00", generator: { date: "2024-11-22T10:02:52+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:1139", initial_release_date: "2016-05-31T05:42:41+00:00", revision_history: [ { date: "2016-05-31T05:42:41+00:00", number: "1", summary: "Initial version", }, { date: "2016-05-31T05:42:41+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T10:02:52+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.src", product: { name: "squid-7:3.3.8-26.el7_2.3.src", product_id: "squid-7:3.3.8-26.el7_2.3.src", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=src&epoch=7", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=x86_64&epoch=7", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=s390x&epoch=7", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=ppc64&epoch=7", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid-debuginfo@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, { category: "product_version", name: "squid-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, { category: "product_version", name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product_id: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/squid-sysvinit@3.3.8-26.el7_2.3?arch=ppc64le&epoch=7", }, }, }, ], category: "architecture", name: "ppc64le", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Server-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", }, product_reference: "squid-7:3.3.8-26.el7_2.3.src", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, { category: "default_component_of", full_product_name: { name: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", }, product_reference: "squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", relates_to_product_reference: "7Workstation-optional-7.2.Z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-4051", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329126", }, ], notes: [ { category: "description", text: "A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "squid: buffer overflow in cachemgr.cgi", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "RHBZ#1329126", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329126", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4051", url: "https://www.cve.org/CVERecord?id=CVE-2016-4051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4051", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_5.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: buffer overflow in cachemgr.cgi", }, { cve: "CVE-2016-4052", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4052", url: "https://www.cve.org/CVERecord?id=CVE-2016-4052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4052", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4053", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4053", url: "https://www.cve.org/CVERecord?id=CVE-2016-4053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4054", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-04-20T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1329136", }, ], notes: [ { category: "description", text: "Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: multiple issues in ESI processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "RHBZ#1329136", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1329136", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4054", url: "https://www.cve.org/CVERecord?id=CVE-2016-4054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4054", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, ], release_date: "2016-04-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.1, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: multiple issues in ESI processing", }, { cve: "CVE-2016-4553", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334233", }, ], notes: [ { category: "description", text: "An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid.", title: "Vulnerability description", }, { category: "summary", text: "squid: Cache poisoning issue in HTTP Request handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "RHBZ#1334233", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334233", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4553", url: "https://www.cve.org/CVERecord?id=CVE-2016-4553", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4553", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Cache poisoning issue in HTTP Request handling", }, { cve: "CVE-2016-4554", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334241", }, ], notes: [ { category: "description", text: "An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230.", title: "Vulnerability description", }, { category: "summary", text: "squid: Header Smuggling issue in HTTP Request processing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "RHBZ#1334241", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334241", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4554", url: "https://www.cve.org/CVERecord?id=CVE-2016-4554", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4554", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_8.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:H/Au:N/C:N/I:P/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: Header Smuggling issue in HTTP Request processing", }, { cve: "CVE-2016-4555", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334246", }, ], notes: [ { category: "description", text: "A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process.", title: "Vulnerability description", }, { category: "summary", text: "squid: SegFault from ESIInclude::Start", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "RHBZ#1334246", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334246", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4555", url: "https://www.cve.org/CVERecord?id=CVE-2016-4555", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4555", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SegFault from ESIInclude::Start", }, { cve: "CVE-2016-4556", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2016-05-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1334786", }, ], notes: [ { category: "description", text: "An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack.", title: "Vulnerability description", }, { category: "summary", text: "squid: SIGSEGV in ESIContext response handling", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "RHBZ#1334786", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1334786", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-4556", url: "https://www.cve.org/CVERecord?id=CVE-2016-4556", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4556", }, { category: "external", summary: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", url: "http://www.squid-cache.org/Advisories/SQUID-2016_9.txt", }, ], release_date: "2016-05-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-05-31T05:42:41+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the squid service will be restarted automatically.", product_ids: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:1139", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Server-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Server-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.src", "7Workstation-optional-7.2.Z:squid-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-debuginfo-7:3.3.8-26.el7_2.3.x86_64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.ppc64le", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.s390x", "7Workstation-optional-7.2.Z:squid-sysvinit-7:3.3.8-26.el7_2.3.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "squid: SIGSEGV in ESIContext response handling", }, ], }
gsd-2016-4053
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
Aliases
Aliases
{ GSD: { alias: "CVE-2016-4053", description: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", id: "GSD-2016-4053", references: [ "https://www.suse.com/security/cve/CVE-2016-4053.html", "https://www.debian.org/security/2016/dsa-3625", "https://access.redhat.com/errata/RHSA-2016:1140", "https://access.redhat.com/errata/RHSA-2016:1139", "https://access.redhat.com/errata/RHSA-2016:1138", "https://ubuntu.com/security/CVE-2016-4053", "https://alas.aws.amazon.com/cve/html/CVE-2016-4053.html", "https://linux.oracle.com/cve/CVE-2016-4053.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2016-4053", ], details: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", id: "GSD-2016-4053", modified: "2023-12-13T01:21:19.041249Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2016-4053", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", refsource: "CONFIRM", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { name: "GLSA-201607-01", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201607-01", }, { name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { name: "SUSE-SU-2016:1996", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { name: "[oss-security] 20160421 CVE Request: Squid HTTP Caching Proxy multiple issues", refsource: "MLIST", url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { name: "USN-2995-1", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-2995-1", }, { name: "RHSA-2016:1140", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { name: "openSUSE-SU-2016:2081", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { name: "RHSA-2016:1138", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { name: "91787", refsource: "BID", url: "http://www.securityfocus.com/bid/91787", }, { name: "RHSA-2016:1139", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { name: "SUSE-SU-2016:2089", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { name: "[oss-security] 20160420 Re: CVE Request: Squid HTTP Caching Proxy multiple issues", refsource: "MLIST", url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { name: "1035647", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1035647", }, { name: "DSA-3625", refsource: "DEBIAN", url: "http://www.debian.org/security/2016/dsa-3625", }, { name: "86788", refsource: "BID", url: "http://www.securityfocus.com/bid/86788", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.0.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.4.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.0.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.0.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.18:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.4.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.20:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.19:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.17:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.0.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.21:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.12.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.0.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.5.0.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.0.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.4.0.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.0.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.3.0.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.12.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.12.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2016-4053", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-119", }, ], }, ], }, references: { reference_data: [ { name: "[oss-security] 20160420 Re: CVE Request: Squid HTTP Caching Proxy multiple issues", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { name: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { name: "[oss-security] 20160421 CVE Request: Squid HTTP Caching Proxy multiple issues", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { name: "1035647", refsource: "SECTRACK", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1035647", }, { name: "USN-2995-1", refsource: "UBUNTU", tags: [ "Third Party Advisory", ], url: "http://www.ubuntu.com/usn/USN-2995-1", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", refsource: "CONFIRM", tags: [ "Patch", "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { name: "91787", refsource: "BID", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/91787", }, { name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { name: "SUSE-SU-2016:2089", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { name: "SUSE-SU-2016:1996", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { name: "86788", refsource: "BID", tags: [], url: "http://www.securityfocus.com/bid/86788", }, { name: "GLSA-201607-01", refsource: "GENTOO", tags: [], url: "https://security.gentoo.org/glsa/201607-01", }, { name: "openSUSE-SU-2016:2081", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { name: "DSA-3625", refsource: "DEBIAN", tags: [], url: "http://www.debian.org/security/2016/dsa-3625", }, { name: "RHSA-2016:1140", refsource: "REDHAT", tags: [], url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { name: "RHSA-2016:1139", refsource: "REDHAT", tags: [], url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { name: "RHSA-2016:1138", refsource: "REDHAT", tags: [], url: "https://access.redhat.com/errata/RHSA-2016:1138", }, ], }, }, impact: { baseMetricV2: { cvssV2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, exploitabilityScore: 2.2, impactScore: 1.4, }, }, lastModifiedDate: "2019-12-27T16:08Z", publishedDate: "2016-04-25T14:59Z", }, }, }
ghsa-w3wm-74g5-vppf
Vulnerability from github
Published
2022-05-13 01:29
Modified
2022-05-13 01:29
Severity ?
Details
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
{ affected: [], aliases: [ "CVE-2016-4053", ], database_specific: { cwe_ids: [ "CWE-119", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2016-04-25T14:59:00Z", severity: "MODERATE", }, details: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", id: "GHSA-w3wm-74g5-vppf", modified: "2022-05-13T01:29:26Z", published: "2022-05-13T01:29:26Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-4053", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201607-01", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { type: "WEB", url: "http://www.debian.org/security/2016/dsa-3625", }, { type: "WEB", url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { type: "WEB", url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { type: "WEB", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { type: "WEB", url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { type: "WEB", url: "http://www.securityfocus.com/bid/86788", }, { type: "WEB", url: "http://www.securityfocus.com/bid/91787", }, { type: "WEB", url: "http://www.securitytracker.com/id/1035647", }, { type: "WEB", url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { type: "WEB", url: "http://www.ubuntu.com/usn/USN-2995-1", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", type: "CVSS_V3", }, ], }
suse-su-2016:2008-1
Vulnerability from csaf_suse
Published
2016-08-09 11:32
Modified
2016-08-09 11:32
Summary
Security update for squid
Notes
Title of the patch
Security update for squid
Description of the patch
The Squid HTTP proxy has been updated to version 3.3.14, fixing the following
security issues:
- Fixed multiple Denial of Service issues in HTTP Response processing.
(CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572,
bsc#968392, bsc#968393, bsc#968394, bsc#968395)
- CVE-2016-3947: Buffer overrun issue in pinger ICMPv6
processing. (bsc#973782)
- CVE-2015-5400: Improper protection of alternate path. (bsc#938715)
- CVE-2015-3455: Squid http proxy configured with client-first SSL
bumping did not correctly validate server certificate. (bsc#929493)
- CVE-2016-3948: Fixed denial of service in HTTP Response processing
(bsc#973783)
- CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553)
- CVE-2016-4052, CVE-2016-4053, CVE-2016-4054: Fixed multiple issues in
ESI processing (bsc#976556)
- CVE-2016-4553: Fixed cache poisoning issue in HTTP Request handling (bsc#979009)
- CVE-2016-4554: Fixed header smuggling issue in HTTP Request processing
(bsc#979010)
- Fixed multiple Denial of Service issues in ESI Response processing.
(CVE-2016-4555, CVE-2016-4556, bsc#979011, bsc#979008)
Additionally, the following non-security issues have been fixed:
- Fix header size in script unsquid.pl. (bsc#902197)
- Add external helper ext_session_acl to package. (bsc#959290)
- Update forward_max_tries to permit 25 server paths
With cloud sites becoming more popular more CDN servers are producing
long lists of IPv6 and IPv4 addresses. If there are not enough paths
selected the IPv4 ones may never be reached.
- squid.init: wait that squid really dies when we kill it on upgrade instead
of proclaiming its demise prematurely (bnc#963539)
Patchnames
SUSE-SLE-SERVER-12-SP1-2016-1184
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for squid", title: "Title of the patch", }, { category: "description", text: "\nThe Squid HTTP proxy has been updated to version 3.3.14, fixing the following\nsecurity issues:\n\n- Fixed multiple Denial of Service issues in HTTP Response processing.\n (CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572,\n bsc#968392, bsc#968393, bsc#968394, bsc#968395)\n- CVE-2016-3947: Buffer overrun issue in pinger ICMPv6\n processing. (bsc#973782)\n- CVE-2015-5400: Improper protection of alternate path. (bsc#938715)\n- CVE-2015-3455: Squid http proxy configured with client-first SSL\n bumping did not correctly validate server certificate. (bsc#929493)\n- CVE-2016-3948: Fixed denial of service in HTTP Response processing\n (bsc#973783)\n- CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553)\n- CVE-2016-4052, CVE-2016-4053, CVE-2016-4054: Fixed multiple issues in\n ESI processing (bsc#976556)\n- CVE-2016-4553: Fixed cache poisoning issue in HTTP Request handling (bsc#979009)\n- CVE-2016-4554: Fixed header smuggling issue in HTTP Request processing\n (bsc#979010)\n- Fixed multiple Denial of Service issues in ESI Response processing.\n (CVE-2016-4555, CVE-2016-4556, bsc#979011, bsc#979008)\n\nAdditionally, the following non-security issues have been fixed:\n\n- Fix header size in script unsquid.pl. (bsc#902197)\n- Add external helper ext_session_acl to package. (bsc#959290)\n- Update forward_max_tries to permit 25 server paths\n With cloud sites becoming more popular more CDN servers are producing\n long lists of IPv6 and IPv4 addresses. If there are not enough paths\n selected the IPv4 ones may never be reached.\n- squid.init: wait that squid really dies when we kill it on upgrade instead\n of proclaiming its demise prematurely (bnc#963539)\n", title: "Description of the patch", }, { category: "details", text: "SUSE-SLE-SERVER-12-SP1-2016-1184", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2008-1.json", }, { category: "self", summary: "URL for SUSE-SU-2016:2008-1", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162008-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2016:2008-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html", }, { category: "self", summary: "SUSE Bug 902197", url: "https://bugzilla.suse.com/902197", }, { category: "self", summary: "SUSE Bug 929493", url: "https://bugzilla.suse.com/929493", }, { category: "self", summary: "SUSE Bug 938715", url: "https://bugzilla.suse.com/938715", }, { category: "self", summary: "SUSE Bug 955783", url: "https://bugzilla.suse.com/955783", }, { category: "self", summary: "SUSE Bug 959290", url: "https://bugzilla.suse.com/959290", }, { category: "self", summary: "SUSE Bug 963539", url: "https://bugzilla.suse.com/963539", }, { category: "self", summary: "SUSE Bug 968392", url: "https://bugzilla.suse.com/968392", }, { category: "self", summary: "SUSE Bug 968393", url: "https://bugzilla.suse.com/968393", }, { category: "self", summary: "SUSE Bug 968394", url: "https://bugzilla.suse.com/968394", }, { category: "self", summary: "SUSE Bug 968395", url: "https://bugzilla.suse.com/968395", }, { category: "self", summary: "SUSE Bug 973782", url: "https://bugzilla.suse.com/973782", }, { category: "self", summary: "SUSE Bug 973783", url: "https://bugzilla.suse.com/973783", }, { category: "self", summary: "SUSE Bug 976553", url: "https://bugzilla.suse.com/976553", }, { category: "self", summary: "SUSE Bug 976556", url: "https://bugzilla.suse.com/976556", }, { category: "self", summary: "SUSE Bug 979008", url: "https://bugzilla.suse.com/979008", }, { category: "self", summary: "SUSE Bug 979009", url: "https://bugzilla.suse.com/979009", }, { category: "self", summary: "SUSE Bug 979010", url: "https://bugzilla.suse.com/979010", }, { category: "self", summary: "SUSE Bug 979011", url: "https://bugzilla.suse.com/979011", }, { category: "self", summary: "SUSE CVE CVE-2015-3455 page", url: "https://www.suse.com/security/cve/CVE-2015-3455/", }, { category: "self", summary: "SUSE CVE CVE-2015-5400 page", url: "https://www.suse.com/security/cve/CVE-2015-5400/", }, { category: "self", summary: "SUSE CVE CVE-2016-2569 page", url: "https://www.suse.com/security/cve/CVE-2016-2569/", }, { category: "self", summary: "SUSE CVE CVE-2016-2570 page", url: "https://www.suse.com/security/cve/CVE-2016-2570/", }, { category: "self", summary: "SUSE CVE CVE-2016-2571 page", url: "https://www.suse.com/security/cve/CVE-2016-2571/", }, { category: "self", summary: "SUSE CVE CVE-2016-2572 page", url: "https://www.suse.com/security/cve/CVE-2016-2572/", }, { category: "self", summary: "SUSE CVE CVE-2016-3947 page", url: "https://www.suse.com/security/cve/CVE-2016-3947/", }, { category: "self", summary: "SUSE CVE CVE-2016-3948 page", url: "https://www.suse.com/security/cve/CVE-2016-3948/", }, { category: "self", summary: "SUSE CVE CVE-2016-4051 page", url: "https://www.suse.com/security/cve/CVE-2016-4051/", }, { category: "self", summary: "SUSE CVE CVE-2016-4052 page", url: "https://www.suse.com/security/cve/CVE-2016-4052/", }, { category: "self", summary: "SUSE CVE CVE-2016-4053 page", url: "https://www.suse.com/security/cve/CVE-2016-4053/", }, { category: "self", summary: "SUSE CVE CVE-2016-4054 page", url: "https://www.suse.com/security/cve/CVE-2016-4054/", }, { category: "self", summary: "SUSE CVE CVE-2016-4553 page", url: "https://www.suse.com/security/cve/CVE-2016-4553/", }, { category: "self", summary: "SUSE CVE CVE-2016-4554 page", url: "https://www.suse.com/security/cve/CVE-2016-4554/", }, { category: "self", summary: "SUSE CVE CVE-2016-4555 page", url: "https://www.suse.com/security/cve/CVE-2016-4555/", }, { category: "self", summary: "SUSE CVE CVE-2016-4556 page", url: "https://www.suse.com/security/cve/CVE-2016-4556/", }, ], title: "Security update for squid", tracking: { current_release_date: "2016-08-09T11:32:29Z", generator: { date: "2016-08-09T11:32:29Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2016:2008-1", initial_release_date: "2016-08-09T11:32:29Z", revision_history: [ { date: "2016-08-09T11:32:29Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "squid-3.3.14-20.2.ppc64le", product: { name: "squid-3.3.14-20.2.ppc64le", product_id: "squid-3.3.14-20.2.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "squid-3.3.14-20.2.s390x", product: { name: "squid-3.3.14-20.2.s390x", product_id: "squid-3.3.14-20.2.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid-3.3.14-20.2.x86_64", product: { name: "squid-3.3.14-20.2.x86_64", product_id: "squid-3.3.14-20.2.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP1", product: { name: "SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp1", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid-3.3.14-20.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", }, product_reference: "squid-3.3.14-20.2.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "squid-3.3.14-20.2.s390x as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", }, product_reference: "squid-3.3.14-20.2.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "squid-3.3.14-20.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", }, product_reference: "squid-3.3.14-20.2.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "squid-3.3.14-20.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", }, product_reference: "squid-3.3.14-20.2.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "squid-3.3.14-20.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", }, product_reference: "squid-3.3.14-20.2.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "squid-3.3.14-20.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", }, product_reference: "squid-3.3.14-20.2.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, ], }, vulnerabilities: [ { cve: "CVE-2015-3455", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-3455", }, ], notes: [ { category: "general", text: "Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-3455", url: "https://www.suse.com/security/cve/CVE-2015-3455", }, { category: "external", summary: "SUSE Bug 929493 for CVE-2015-3455", url: "https://bugzilla.suse.com/929493", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2015-3455", }, { cve: "CVE-2015-5400", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5400", }, ], notes: [ { category: "general", text: "Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5400", url: "https://www.suse.com/security/cve/CVE-2015-5400", }, { category: "external", summary: "SUSE Bug 938715 for CVE-2015-5400", url: "https://bugzilla.suse.com/938715", }, { category: "external", summary: "SUSE Bug 967073 for CVE-2015-5400", url: "https://bugzilla.suse.com/967073", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2015-5400", }, { cve: "CVE-2016-2569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2569", }, ], notes: [ { category: "general", text: "Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2569", url: "https://www.suse.com/security/cve/CVE-2016-2569", }, { category: "external", summary: "SUSE Bug 968392 for CVE-2016-2569", url: "https://bugzilla.suse.com/968392", }, { category: "external", summary: "SUSE Bug 968393 for CVE-2016-2569", url: "https://bugzilla.suse.com/968393", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-2569", }, { cve: "CVE-2016-2570", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2570", }, ], notes: [ { category: "general", text: "The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2570", url: "https://www.suse.com/security/cve/CVE-2016-2570", }, { category: "external", summary: "SUSE Bug 968392 for CVE-2016-2570", url: "https://bugzilla.suse.com/968392", }, { category: "external", summary: "SUSE Bug 968393 for CVE-2016-2570", url: "https://bugzilla.suse.com/968393", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-2570", }, { cve: "CVE-2016-2571", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2571", }, ], notes: [ { category: "general", text: "http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2571", url: "https://www.suse.com/security/cve/CVE-2016-2571", }, { category: "external", summary: "SUSE Bug 968394 for CVE-2016-2571", url: "https://bugzilla.suse.com/968394", }, { category: "external", summary: "SUSE Bug 968395 for CVE-2016-2571", url: "https://bugzilla.suse.com/968395", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-2571", }, { cve: "CVE-2016-2572", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2572", }, ], notes: [ { category: "general", text: "http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2572", url: "https://www.suse.com/security/cve/CVE-2016-2572", }, { category: "external", summary: "SUSE Bug 968394 for CVE-2016-2572", url: "https://bugzilla.suse.com/968394", }, { category: "external", summary: "SUSE Bug 968395 for CVE-2016-2572", url: "https://bugzilla.suse.com/968395", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-2572", }, { cve: "CVE-2016-3947", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-3947", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-3947", url: "https://www.suse.com/security/cve/CVE-2016-3947", }, { category: "external", summary: "SUSE Bug 973782 for CVE-2016-3947", url: "https://bugzilla.suse.com/973782", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2016-3947", }, { cve: "CVE-2016-3948", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-3948", }, ], notes: [ { category: "general", text: "Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-3948", url: "https://www.suse.com/security/cve/CVE-2016-3948", }, { category: "external", summary: "SUSE Bug 973783 for CVE-2016-3948", url: "https://bugzilla.suse.com/973783", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2016-3948", }, { cve: "CVE-2016-4051", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4051", }, ], notes: [ { category: "general", text: "Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4051", url: "https://www.suse.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "SUSE Bug 976553 for CVE-2016-4051", url: "https://bugzilla.suse.com/976553", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-4051", }, { cve: "CVE-2016-4052", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4052", }, ], notes: [ { category: "general", text: "Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4052", url: "https://www.suse.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "SUSE Bug 976556 for CVE-2016-4052", url: "https://bugzilla.suse.com/976556", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-4052", }, { cve: "CVE-2016-4053", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4053", }, ], notes: [ { category: "general", text: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4053", url: "https://www.suse.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "SUSE Bug 976556 for CVE-2016-4053", url: "https://bugzilla.suse.com/976556", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-4053", }, { cve: "CVE-2016-4054", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4054", }, ], notes: [ { category: "general", text: "Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4054", url: "https://www.suse.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "SUSE Bug 976556 for CVE-2016-4054", url: "https://bugzilla.suse.com/976556", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "important", }, ], title: "CVE-2016-4054", }, { cve: "CVE-2016-4553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4553", }, ], notes: [ { category: "general", text: "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4553", url: "https://www.suse.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "SUSE Bug 979009 for CVE-2016-4553", url: "https://bugzilla.suse.com/979009", }, { category: "external", summary: "SUSE Bug 990451 for CVE-2016-4553", url: "https://bugzilla.suse.com/990451", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2016-4553", }, { cve: "CVE-2016-4554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4554", }, ], notes: [ { category: "general", text: "mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a \"header smuggling\" issue.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4554", url: "https://www.suse.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "SUSE Bug 979010 for CVE-2016-4554", url: "https://bugzilla.suse.com/979010", }, { category: "external", summary: "SUSE Bug 990451 for CVE-2016-4554", url: "https://bugzilla.suse.com/990451", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2016-4554", }, { cve: "CVE-2016-4555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4555", }, ], notes: [ { category: "general", text: "client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4555", url: "https://www.suse.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "SUSE Bug 979008 for CVE-2016-4555", url: "https://bugzilla.suse.com/979008", }, { category: "external", summary: "SUSE Bug 979011 for CVE-2016-4555", url: "https://bugzilla.suse.com/979011", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2016-4555", }, { cve: "CVE-2016-4556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4556", }, ], notes: [ { category: "general", text: "Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4556", url: "https://www.suse.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "SUSE Bug 979008 for CVE-2016-4556", url: "https://bugzilla.suse.com/979008", }, { category: "external", summary: "SUSE Bug 979011 for CVE-2016-4556", url: "https://bugzilla.suse.com/979011", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server 12 SP1:squid-3.3.14-20.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:squid-3.3.14-20.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-09T11:32:29Z", details: "moderate", }, ], title: "CVE-2016-4556", }, ], }
suse-su-2016:2089-1
Vulnerability from csaf_suse
Published
2016-08-16 12:56
Modified
2016-08-16 12:56
Summary
Security update for squid3
Notes
Title of the patch
Security update for squid3
Description of the patch
This update for squid3 fixes the following issues:
- Multiple issues in pinger ICMP processing. (CVE-2014-7141, CVE-2014-7142)
- CVE-2016-3947: Buffer overrun issue in pinger
ICMPv6 processing. (bsc#973782)
- CVE-2016-4554: fix header smuggling issue in HTTP Request processing (bsc#979010)
- Fix multiple Denial of Service issues in HTTP Response processing.
(CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572,
bsc#968392, bsc#968393, bsc#968394, bsc#968395)
- Regression caused by the DoS fixes above (bsc#993299)
- CVE-2016-3948: Fix denial of service in HTTP Response processing (bsc#973783)
- CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553)
- CVE-2016-4052, CVE-2016-4053, CVE-2016-4054:
* fixes multiple issues in ESI processing (bsc#976556)
- CVE-2016-4556: fixes double free vulnerability in Esi.cc (bsc#979008)
- CVE-2015-5400: Improper Protection of Alternate Path (bsc#938715)
- CVE-2014-6270: fix off-by-one in snmp subsystem (bsc#895773)
- Memory leak in squid3 when using external_acl (bsc#976708)
Patchnames
slessp4-squid3-12701
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for squid3", title: "Title of the patch", }, { category: "description", text: "\n\nThis update for squid3 fixes the following issues:\n\n- Multiple issues in pinger ICMP processing. (CVE-2014-7141, CVE-2014-7142) \n\n- CVE-2016-3947: Buffer overrun issue in pinger\n ICMPv6 processing. (bsc#973782)\n\n- CVE-2016-4554: fix header smuggling issue in HTTP Request processing (bsc#979010)\n\n- Fix multiple Denial of Service issues in HTTP Response processing.\n (CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572,\n bsc#968392, bsc#968393, bsc#968394, bsc#968395)\n- Regression caused by the DoS fixes above (bsc#993299)\n\n- CVE-2016-3948: Fix denial of service in HTTP Response processing (bsc#973783)\n\n- CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553)\n\n- CVE-2016-4052, CVE-2016-4053, CVE-2016-4054:\n * fixes multiple issues in ESI processing (bsc#976556)\n\n- CVE-2016-4556: fixes double free vulnerability in Esi.cc (bsc#979008)\n\n- CVE-2015-5400: Improper Protection of Alternate Path (bsc#938715)\n\n- CVE-2014-6270: fix off-by-one in snmp subsystem (bsc#895773)\n\n- Memory leak in squid3 when using external_acl (bsc#976708)\n", title: "Description of the patch", }, { category: "details", text: "slessp4-squid3-12701", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2089-1.json", }, { category: "self", summary: "URL for SUSE-SU-2016:2089-1", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162089-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2016:2089-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2016-August/002212.html", }, { category: "self", summary: "SUSE Bug 895773", url: "https://bugzilla.suse.com/895773", }, { category: "self", summary: "SUSE Bug 902197", url: "https://bugzilla.suse.com/902197", }, { category: "self", summary: "SUSE Bug 938715", url: "https://bugzilla.suse.com/938715", }, { category: "self", summary: "SUSE Bug 963539", url: "https://bugzilla.suse.com/963539", }, { category: "self", summary: "SUSE Bug 967011", url: "https://bugzilla.suse.com/967011", }, { category: "self", summary: "SUSE Bug 968392", url: "https://bugzilla.suse.com/968392", }, { category: "self", summary: "SUSE Bug 968393", url: "https://bugzilla.suse.com/968393", }, { category: "self", summary: "SUSE Bug 968394", url: "https://bugzilla.suse.com/968394", }, { category: "self", summary: "SUSE Bug 968395", url: "https://bugzilla.suse.com/968395", }, { category: "self", summary: "SUSE Bug 973782", url: "https://bugzilla.suse.com/973782", }, { category: "self", summary: "SUSE Bug 973783", url: "https://bugzilla.suse.com/973783", }, { category: "self", summary: "SUSE Bug 976553", url: "https://bugzilla.suse.com/976553", }, { category: "self", summary: "SUSE Bug 976556", url: "https://bugzilla.suse.com/976556", }, { category: "self", summary: "SUSE Bug 976708", url: "https://bugzilla.suse.com/976708", }, { category: "self", summary: "SUSE Bug 979008", url: "https://bugzilla.suse.com/979008", }, { category: "self", summary: "SUSE Bug 979009", url: "https://bugzilla.suse.com/979009", }, { category: "self", summary: "SUSE Bug 979010", url: "https://bugzilla.suse.com/979010", }, { category: "self", summary: "SUSE Bug 979011", url: "https://bugzilla.suse.com/979011", }, { category: "self", summary: "SUSE Bug 993299", url: "https://bugzilla.suse.com/993299", }, { category: "self", summary: "SUSE CVE CVE-2011-3205 page", url: "https://www.suse.com/security/cve/CVE-2011-3205/", }, { category: "self", summary: "SUSE CVE CVE-2011-4096 page", url: "https://www.suse.com/security/cve/CVE-2011-4096/", }, { category: "self", summary: "SUSE CVE CVE-2012-5643 page", url: "https://www.suse.com/security/cve/CVE-2012-5643/", }, { category: "self", summary: "SUSE CVE CVE-2013-0188 page", url: "https://www.suse.com/security/cve/CVE-2013-0188/", }, { category: "self", summary: "SUSE CVE CVE-2013-4115 page", url: "https://www.suse.com/security/cve/CVE-2013-4115/", }, { category: "self", summary: "SUSE CVE CVE-2014-0128 page", url: "https://www.suse.com/security/cve/CVE-2014-0128/", }, { category: "self", summary: "SUSE CVE CVE-2014-6270 page", url: "https://www.suse.com/security/cve/CVE-2014-6270/", }, { category: "self", summary: "SUSE CVE CVE-2014-7141 page", url: "https://www.suse.com/security/cve/CVE-2014-7141/", }, { category: "self", summary: "SUSE CVE CVE-2014-7142 page", url: "https://www.suse.com/security/cve/CVE-2014-7142/", }, { category: "self", summary: "SUSE CVE CVE-2015-5400 page", url: "https://www.suse.com/security/cve/CVE-2015-5400/", }, { category: "self", summary: "SUSE CVE CVE-2016-2390 page", url: "https://www.suse.com/security/cve/CVE-2016-2390/", }, { category: "self", summary: "SUSE CVE CVE-2016-2569 page", url: "https://www.suse.com/security/cve/CVE-2016-2569/", }, { category: "self", summary: "SUSE CVE CVE-2016-2570 page", url: "https://www.suse.com/security/cve/CVE-2016-2570/", }, { category: "self", summary: "SUSE CVE CVE-2016-2571 page", url: "https://www.suse.com/security/cve/CVE-2016-2571/", }, { category: "self", summary: "SUSE CVE CVE-2016-2572 page", url: "https://www.suse.com/security/cve/CVE-2016-2572/", }, { category: "self", summary: "SUSE CVE CVE-2016-3947 page", url: "https://www.suse.com/security/cve/CVE-2016-3947/", }, { category: "self", summary: "SUSE CVE CVE-2016-3948 page", url: "https://www.suse.com/security/cve/CVE-2016-3948/", }, { category: "self", summary: "SUSE CVE CVE-2016-4051 page", url: "https://www.suse.com/security/cve/CVE-2016-4051/", }, { category: "self", summary: "SUSE CVE CVE-2016-4052 page", url: "https://www.suse.com/security/cve/CVE-2016-4052/", }, { category: "self", summary: "SUSE CVE CVE-2016-4053 page", url: "https://www.suse.com/security/cve/CVE-2016-4053/", }, { category: "self", summary: "SUSE CVE CVE-2016-4054 page", url: "https://www.suse.com/security/cve/CVE-2016-4054/", }, { category: "self", summary: "SUSE CVE CVE-2016-4553 page", url: "https://www.suse.com/security/cve/CVE-2016-4553/", }, { category: "self", summary: "SUSE CVE CVE-2016-4554 page", url: "https://www.suse.com/security/cve/CVE-2016-4554/", }, { category: "self", summary: "SUSE CVE CVE-2016-4555 page", url: "https://www.suse.com/security/cve/CVE-2016-4555/", }, { category: "self", summary: "SUSE CVE CVE-2016-4556 page", url: "https://www.suse.com/security/cve/CVE-2016-4556/", }, ], title: "Security update for squid3", tracking: { current_release_date: "2016-08-16T12:56:03Z", generator: { date: "2016-08-16T12:56:03Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2016:2089-1", initial_release_date: "2016-08-16T12:56:03Z", revision_history: [ { date: "2016-08-16T12:56:03Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "squid3-3.1.23-8.16.30.1.i586", product: { name: "squid3-3.1.23-8.16.30.1.i586", product_id: "squid3-3.1.23-8.16.30.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "squid3-3.1.23-8.16.30.1.ia64", product: { name: "squid3-3.1.23-8.16.30.1.ia64", product_id: "squid3-3.1.23-8.16.30.1.ia64", }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "squid3-3.1.23-8.16.30.1.ppc64", product: { name: "squid3-3.1.23-8.16.30.1.ppc64", product_id: "squid3-3.1.23-8.16.30.1.ppc64", }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "squid3-3.1.23-8.16.30.1.s390x", product: { name: "squid3-3.1.23-8.16.30.1.s390x", product_id: "squid3-3.1.23-8.16.30.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "squid3-3.1.23-8.16.30.1.x86_64", product: { name: "squid3-3.1.23-8.16.30.1.x86_64", product_id: "squid3-3.1.23-8.16.30.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Server 11 SP4", product: { name: "SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:suse_sles:11:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product: { name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:11:sp4", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", }, product_reference: "squid3-3.1.23-8.16.30.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", }, product_reference: "squid3-3.1.23-8.16.30.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", }, product_reference: "squid3-3.1.23-8.16.30.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", }, product_reference: "squid3-3.1.23-8.16.30.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", }, product_reference: "squid3-3.1.23-8.16.30.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", }, product_reference: "squid3-3.1.23-8.16.30.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", }, product_reference: "squid3-3.1.23-8.16.30.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", }, product_reference: "squid3-3.1.23-8.16.30.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", }, product_reference: "squid3-3.1.23-8.16.30.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "squid3-3.1.23-8.16.30.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", }, product_reference: "squid3-3.1.23-8.16.30.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, ], }, vulnerabilities: [ { cve: "CVE-2011-3205", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3205", }, ], notes: [ { category: "general", text: "Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3205", url: "https://www.suse.com/security/cve/CVE-2011-3205", }, { category: "external", summary: "SUSE Bug 715171 for CVE-2011-3205", url: "https://bugzilla.suse.com/715171", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2011-3205", }, { cve: "CVE-2011-4096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-4096", }, ], notes: [ { category: "general", text: "The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-4096", url: "https://www.suse.com/security/cve/CVE-2011-4096", }, { category: "external", summary: "SUSE Bug 727492 for CVE-2011-4096", url: "https://bugzilla.suse.com/727492", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2011-4096", }, { cve: "CVE-2012-5643", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5643", }, ], notes: [ { category: "general", text: "Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5643", url: "https://www.suse.com/security/cve/CVE-2012-5643", }, { category: "external", summary: "SUSE Bug 794954 for CVE-2012-5643", url: "https://bugzilla.suse.com/794954", }, { category: "external", summary: "SUSE Bug 796999 for CVE-2012-5643", url: "https://bugzilla.suse.com/796999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2012-5643", }, { cve: "CVE-2013-0188", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0188", }, ], notes: [ { category: "general", text: "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0189, CVE-2013-0191. Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues. Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0188", url: "https://www.suse.com/security/cve/CVE-2013-0188", }, { category: "external", summary: "SUSE Bug 794954 for CVE-2013-0188", url: "https://bugzilla.suse.com/794954", }, { category: "external", summary: "SUSE Bug 796999 for CVE-2013-0188", url: "https://bugzilla.suse.com/796999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2013-0188", }, { cve: "CVE-2013-4115", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-4115", }, ], notes: [ { category: "general", text: "Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-4115", url: "https://www.suse.com/security/cve/CVE-2013-4115", }, { category: "external", summary: "SUSE Bug 829084 for CVE-2013-4115", url: "https://bugzilla.suse.com/829084", }, { category: "external", summary: "SUSE Bug 880233 for CVE-2013-4115", url: "https://bugzilla.suse.com/880233", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2013-4115", }, { cve: "CVE-2014-0128", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0128", }, ], notes: [ { category: "general", text: "Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0128", url: "https://www.suse.com/security/cve/CVE-2014-0128", }, { category: "external", summary: "SUSE Bug 867533 for CVE-2014-0128", url: "https://bugzilla.suse.com/867533", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2014-0128", }, { cve: "CVE-2014-6270", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-6270", }, ], notes: [ { category: "general", text: "Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-6270", url: "https://www.suse.com/security/cve/CVE-2014-6270", }, { category: "external", summary: "SUSE Bug 895773 for CVE-2014-6270", url: "https://bugzilla.suse.com/895773", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2014-6270", }, { cve: "CVE-2014-7141", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7141", }, ], notes: [ { category: "general", text: "The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7141", url: "https://www.suse.com/security/cve/CVE-2014-7141", }, { category: "external", summary: "SUSE Bug 1040640 for CVE-2014-7141", url: "https://bugzilla.suse.com/1040640", }, { category: "external", summary: "SUSE Bug 891268 for CVE-2014-7141", url: "https://bugzilla.suse.com/891268", }, { category: "external", summary: "SUSE Bug 895773 for CVE-2014-7141", url: "https://bugzilla.suse.com/895773", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2014-7141", }, { cve: "CVE-2014-7142", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7142", }, ], notes: [ { category: "general", text: "The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7142", url: "https://www.suse.com/security/cve/CVE-2014-7142", }, { category: "external", summary: "SUSE Bug 895773 for CVE-2014-7142", url: "https://bugzilla.suse.com/895773", }, { category: "external", summary: "SUSE Bug 973782 for CVE-2014-7142", url: "https://bugzilla.suse.com/973782", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2014-7142", }, { cve: "CVE-2015-5400", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-5400", }, ], notes: [ { category: "general", text: "Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-5400", url: "https://www.suse.com/security/cve/CVE-2015-5400", }, { category: "external", summary: "SUSE Bug 938715 for CVE-2015-5400", url: "https://bugzilla.suse.com/938715", }, { category: "external", summary: "SUSE Bug 967073 for CVE-2015-5400", url: "https://bugzilla.suse.com/967073", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2015-5400", }, { cve: "CVE-2016-2390", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2390", }, ], notes: [ { category: "general", text: "The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2390", url: "https://www.suse.com/security/cve/CVE-2016-2390", }, { category: "external", summary: "SUSE Bug 967011 for CVE-2016-2390", url: "https://bugzilla.suse.com/967011", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2016-2390", }, { cve: "CVE-2016-2569", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2569", }, ], notes: [ { category: "general", text: "Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2569", url: "https://www.suse.com/security/cve/CVE-2016-2569", }, { category: "external", summary: "SUSE Bug 968392 for CVE-2016-2569", url: "https://bugzilla.suse.com/968392", }, { category: "external", summary: "SUSE Bug 968393 for CVE-2016-2569", url: "https://bugzilla.suse.com/968393", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-2569", }, { cve: "CVE-2016-2570", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2570", }, ], notes: [ { category: "general", text: "The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2570", url: "https://www.suse.com/security/cve/CVE-2016-2570", }, { category: "external", summary: "SUSE Bug 968392 for CVE-2016-2570", url: "https://bugzilla.suse.com/968392", }, { category: "external", summary: "SUSE Bug 968393 for CVE-2016-2570", url: "https://bugzilla.suse.com/968393", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-2570", }, { cve: "CVE-2016-2571", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2571", }, ], notes: [ { category: "general", text: "http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2571", url: "https://www.suse.com/security/cve/CVE-2016-2571", }, { category: "external", summary: "SUSE Bug 968394 for CVE-2016-2571", url: "https://bugzilla.suse.com/968394", }, { category: "external", summary: "SUSE Bug 968395 for CVE-2016-2571", url: "https://bugzilla.suse.com/968395", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-2571", }, { cve: "CVE-2016-2572", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-2572", }, ], notes: [ { category: "general", text: "http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-2572", url: "https://www.suse.com/security/cve/CVE-2016-2572", }, { category: "external", summary: "SUSE Bug 968394 for CVE-2016-2572", url: "https://bugzilla.suse.com/968394", }, { category: "external", summary: "SUSE Bug 968395 for CVE-2016-2572", url: "https://bugzilla.suse.com/968395", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-2572", }, { cve: "CVE-2016-3947", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-3947", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-3947", url: "https://www.suse.com/security/cve/CVE-2016-3947", }, { category: "external", summary: "SUSE Bug 973782 for CVE-2016-3947", url: "https://bugzilla.suse.com/973782", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2016-3947", }, { cve: "CVE-2016-3948", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-3948", }, ], notes: [ { category: "general", text: "Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-3948", url: "https://www.suse.com/security/cve/CVE-2016-3948", }, { category: "external", summary: "SUSE Bug 973783 for CVE-2016-3948", url: "https://bugzilla.suse.com/973783", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2016-3948", }, { cve: "CVE-2016-4051", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4051", }, ], notes: [ { category: "general", text: "Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4051", url: "https://www.suse.com/security/cve/CVE-2016-4051", }, { category: "external", summary: "SUSE Bug 976553 for CVE-2016-4051", url: "https://bugzilla.suse.com/976553", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-4051", }, { cve: "CVE-2016-4052", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4052", }, ], notes: [ { category: "general", text: "Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4052", url: "https://www.suse.com/security/cve/CVE-2016-4052", }, { category: "external", summary: "SUSE Bug 976556 for CVE-2016-4052", url: "https://bugzilla.suse.com/976556", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-4052", }, { cve: "CVE-2016-4053", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4053", }, ], notes: [ { category: "general", text: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4053", url: "https://www.suse.com/security/cve/CVE-2016-4053", }, { category: "external", summary: "SUSE Bug 976556 for CVE-2016-4053", url: "https://bugzilla.suse.com/976556", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-4053", }, { cve: "CVE-2016-4054", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4054", }, ], notes: [ { category: "general", text: "Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4054", url: "https://www.suse.com/security/cve/CVE-2016-4054", }, { category: "external", summary: "SUSE Bug 976556 for CVE-2016-4054", url: "https://bugzilla.suse.com/976556", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "important", }, ], title: "CVE-2016-4054", }, { cve: "CVE-2016-4553", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4553", }, ], notes: [ { category: "general", text: "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4553", url: "https://www.suse.com/security/cve/CVE-2016-4553", }, { category: "external", summary: "SUSE Bug 979009 for CVE-2016-4553", url: "https://bugzilla.suse.com/979009", }, { category: "external", summary: "SUSE Bug 990451 for CVE-2016-4553", url: "https://bugzilla.suse.com/990451", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2016-4553", }, { cve: "CVE-2016-4554", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4554", }, ], notes: [ { category: "general", text: "mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a \"header smuggling\" issue.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4554", url: "https://www.suse.com/security/cve/CVE-2016-4554", }, { category: "external", summary: "SUSE Bug 979010 for CVE-2016-4554", url: "https://bugzilla.suse.com/979010", }, { category: "external", summary: "SUSE Bug 990451 for CVE-2016-4554", url: "https://bugzilla.suse.com/990451", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2016-4554", }, { cve: "CVE-2016-4555", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4555", }, ], notes: [ { category: "general", text: "client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4555", url: "https://www.suse.com/security/cve/CVE-2016-4555", }, { category: "external", summary: "SUSE Bug 979008 for CVE-2016-4555", url: "https://bugzilla.suse.com/979008", }, { category: "external", summary: "SUSE Bug 979011 for CVE-2016-4555", url: "https://bugzilla.suse.com/979011", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2016-4555", }, { cve: "CVE-2016-4556", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-4556", }, ], notes: [ { category: "general", text: "Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-4556", url: "https://www.suse.com/security/cve/CVE-2016-4556", }, { category: "external", summary: "SUSE Bug 979008 for CVE-2016-4556", url: "https://bugzilla.suse.com/979008", }, { category: "external", summary: "SUSE Bug 979011 for CVE-2016-4556", url: "https://bugzilla.suse.com/979011", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.30.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-08-16T12:56:03Z", details: "moderate", }, ], title: "CVE-2016-4556", }, ], }
fkie_cve-2016-4053
Vulnerability from fkie_nvd
Published
2016-04-25 14:59
Modified
2024-11-21 02:51
Severity ?
Summary
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*", matchCriteriaId: "62B9F669-6217-498A-902E-22EDEEFC565E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*", matchCriteriaId: "6A8586AD-E820-4BAE-AAF9-AC7EF2316C06", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "802E3D2B-90B7-4725-854F-4174116BC314", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*", matchCriteriaId: "7501697A-BCFD-4DC3-8D87-CC9A186D9589", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*", matchCriteriaId: "0D6C4455-85F4-462D-9FF6-F830ED7D398E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*", matchCriteriaId: "B600BF4C-8169-4086-BFE6-F066BE5F5406", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*", matchCriteriaId: "46272D1B-1468-48C0-B37A-7D06FAC39C47", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "DA782B4B-486F-4197-BD5D-ABF791D57211", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*", matchCriteriaId: "558D8641-E097-4D91-9B6E-07433844BB82", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*", matchCriteriaId: "0B46F5F1-38FC-4E25-8F04-CA2730561DF8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*", matchCriteriaId: "C69B0A4D-9619-4BEA-A846-C4438C2660F2", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*", matchCriteriaId: "ED17FE35-6B2C-41BF-A7C7-2EECBDB5A934", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*", matchCriteriaId: "78A50750-3A31-482C-B95C-019C8934850E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*", matchCriteriaId: "8FF6AC30-9570-4D4B-835E-CCADEB546F46", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*", matchCriteriaId: "7FB84E4E-6A0A-41C8-9DDF-3C18F526F155", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*", matchCriteriaId: "2E49E5C3-D01F-4DBC-B33A-5495D3EC44F8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*", matchCriteriaId: "79C53B22-9F33-43E7-8D1F-EEB0DEF4B503", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*", matchCriteriaId: "25B60DB2-F50C-42F0-B6C9-B25C34B8F578", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*", matchCriteriaId: "DE973F9E-8387-464F-AFA0-25215B340173", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*", matchCriteriaId: "03D3F0E3-0C50-4A86-87F4-90FC82B312F5", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*", matchCriteriaId: "CE26BEC0-B9C7-43F0-B0FB-E81870170B29", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*", matchCriteriaId: "D0778579-A193-4C61-BB1A-6D2E733F3958", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*", matchCriteriaId: "9ED5DC63-6E9D-4068-95DF-AF8FD9A0A7ED", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*", matchCriteriaId: "8DE890F9-12C0-4D66-B6C1-6A5A87FAD5F0", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*", matchCriteriaId: "FB414FE3-3567-474B-B5A7-D3EF5DD63AB8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*", matchCriteriaId: "AF450F17-12A2-4E33-875A-5F3C2CA4A5C1", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*", matchCriteriaId: "E3AB229E-2C32-410B-BFE2-62DCA734C3F3", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*", matchCriteriaId: "78A6D6B0-9BC0-418E-84EE-23697A0FEC19", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*", matchCriteriaId: "5BF7AFE1-A45A-43B7-B3C7-45C060D046BC", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*", matchCriteriaId: "41914354-D5BE-4B1F-BED3-0ECA43586537", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*", matchCriteriaId: "AE9A3716-8670-4847-A6EB-F601184D369E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*", matchCriteriaId: "D0E88EE3-EC00-4F1F-BAEF-4F1F893C5C5F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*", matchCriteriaId: "A330DFA8-BF79-45CC-BF88-6CEA26D7BC9E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.12.1:*:*:*:*:*:*:*", matchCriteriaId: "0B218819-0975-4E1F-8F6C-D666655937B0", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.12.2:*:*:*:*:*:*:*", matchCriteriaId: "594A05FF-E5D2-4132-BF03-44D6866D8133", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.12.3:*:*:*:*:*:*:*", matchCriteriaId: "3B22C192-02F2-4AD4-A305-BADCC09E8075", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*", matchCriteriaId: "679A55F8-34B4-435A-8BCE-8F842F3FB269", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*", matchCriteriaId: "898674F9-6BF7-469F-A74E-558EAFC2CD27", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*", matchCriteriaId: "3F50E718-1CF2-4C8F-A1EA-5F769B203B8A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.16:*:*:*:*:*:*:*", matchCriteriaId: "290D66F4-D27F-4E86-AC95-05082F3C2E36", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.17:*:*:*:*:*:*:*", matchCriteriaId: "A8CD6A42-2C79-48EB-8F6C-0A7CE0C6AAAA", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.18:*:*:*:*:*:*:*", matchCriteriaId: "ABBA9A61-2B05-4527-A49D-425AD5FD863B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.19:*:*:*:*:*:*:*", matchCriteriaId: "E893D7A8-9C39-438C-8EF2-9573EEDC884A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.20:*:*:*:*:*:*:*", matchCriteriaId: "0B707451-BF0E-4F79-A348-B1141ABA6EF8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.21:*:*:*:*:*:*:*", matchCriteriaId: "810AAA9D-F4B2-4F0A-89DD-2D9378516481", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*", matchCriteriaId: "516F3F77-3AEA-489D-A36F-C502B4D9BF01", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*", matchCriteriaId: "6DFAB3BA-BBE9-4CFB-BE6B-BDF3E7772E7F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*", matchCriteriaId: "C9F523B8-463E-4FB0-ACB6-E36AAAF85CD9", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*", matchCriteriaId: "5BA593D9-907D-4051-A3F2-0F88F01A7C79", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*", matchCriteriaId: "20D2B364-B98A-4484-A10A-86AF43774096", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*", matchCriteriaId: "0B7BF076-0D43-407A-86DC-D1163922A787", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*", matchCriteriaId: "AA576F49-A7F5-4013-89DF-F6C91C15B547", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*", matchCriteriaId: "5D3F52FE-FFB3-4221-8DC7-3F5680A07429", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*", matchCriteriaId: "604FEF42-ABA7-42C1-8A5F-C3AECFD68481", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*", matchCriteriaId: "DC2568C1-89CB-41C1-9126-A8665614D0B1", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*", matchCriteriaId: "C18B5392-3FDB-49E6-89DB-7945D337FBFB", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*", matchCriteriaId: "BA9E0E7F-E93C-4DE9-8D91-5EE50BCFAC2A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*", matchCriteriaId: "0BFF9D8B-343B-415D-8AF8-B07AF94CC48B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*", matchCriteriaId: "16F5794B-BBFB-4B12-9A0B-88A0334681C7", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*", matchCriteriaId: "17D0083E-8D50-4DC6-979F-685D5CB588AF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*", matchCriteriaId: "138FAD73-1D25-4F46-B9EA-599FF0EDA1AA", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*", matchCriteriaId: "2CE34DC1-F654-474E-B6A3-D81B9BF4D6CF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*", matchCriteriaId: "8A4BF7AC-7D9F-40D8-A5AA-BE1EBF37CF96", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*", matchCriteriaId: "643E8B9B-C3F4-4171-BF67-D9359BDCE5CB", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*", matchCriteriaId: "A73CBC60-1EF1-4730-9350-EB51F269695B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*", matchCriteriaId: "2721E403-A553-492F-897F-1CD1E2685139", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*", matchCriteriaId: "85B091C4-8104-4A1E-A09D-EBCD114DC829", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*", matchCriteriaId: "FA2EDF9C-45AD-4980-8DEF-C7F473B22CAF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*", matchCriteriaId: "BE4B8448-49FA-491C-A6A2-040233D670B1", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.5:*:*:*:*:*:*:*", matchCriteriaId: "11480BB1-874C-48EB-BB03-081313310608", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.6:*:*:*:*:*:*:*", matchCriteriaId: "1B739890-99E8-434C-97D4-3739E6C31838", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.7:*:*:*:*:*:*:*", matchCriteriaId: "0C7B1871-3C85-4B88-AB42-E60BF5CDFB04", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.8:*:*:*:*:*:*:*", matchCriteriaId: "0A71DCD2-0E54-46A7-8309-CDB0736AD5C1", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.9:*:*:*:*:*:*:*", matchCriteriaId: "CD54BDDF-F7A8-4715-BA0E-4E7F741492FE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.10:*:*:*:*:*:*:*", matchCriteriaId: "9A2B9699-6622-4883-BA03-E3374C54871A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.11:*:*:*:*:*:*:*", matchCriteriaId: "78391DAF-2096-4DC4-80E4-D4D2859DCA32", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.12:*:*:*:*:*:*:*", matchCriteriaId: "9B062A06-31C1-4B23-B7BD-9F751ABD6A37", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.13:*:*:*:*:*:*:*", matchCriteriaId: "DE426934-A9E2-4019-99EA-5A76EA7CDF5C", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.0:*:*:*:*:*:*:*", matchCriteriaId: "728DD64E-C267-475A-BEA8-C139581DD7A7", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.0.1:*:*:*:*:*:*:*", matchCriteriaId: "A7A83183-74B1-4041-A961-D9F382AAC7E5", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.0.2:*:*:*:*:*:*:*", matchCriteriaId: "4CE8F3F5-45A2-418A-9D8E-4E6DFC888BC6", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.0.3:*:*:*:*:*:*:*", matchCriteriaId: "7F4845D4-40D9-431E-A63C-E949B9D9F959", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.1:*:*:*:*:*:*:*", matchCriteriaId: "9EF070E6-0B73-4F6D-8932-B284697FCD2E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.2:*:*:*:*:*:*:*", matchCriteriaId: "6E07992B-92B4-4307-8DBD-085376C1D6DD", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.3:*:*:*:*:*:*:*", matchCriteriaId: "386550A3-A55B-4F24-9625-6A50260ADA72", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.4:*:*:*:*:*:*:*", matchCriteriaId: "810D1F9E-81E5-45F0-B62B-AB0A797FF8B0", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.5:*:*:*:*:*:*:*", matchCriteriaId: "4673327A-1E50-47CC-AD83-6A3D2E687292", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.6:*:*:*:*:*:*:*", matchCriteriaId: "6624AF2D-9EF0-4597-B8B2-20D7A309EA6F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*", matchCriteriaId: "E9F75D13-ED59-42A9-A662-AC77DBA20903", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.8:*:*:*:*:*:*:*", matchCriteriaId: "1D2DEDED-818C-42E4-821C-954CE7406DA8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.9:*:*:*:*:*:*:*", matchCriteriaId: "EEED0A2E-AA5D-4835-A7C6-499325A0EB32", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.10:*:*:*:*:*:*:*", matchCriteriaId: "BEDD0AF5-8252-4548-941B-26581393E918", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.11:*:*:*:*:*:*:*", matchCriteriaId: "3E939AD4-B8F3-4BC0-9948-3C92B88D2593", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.12:*:*:*:*:*:*:*", matchCriteriaId: "73CAD438-969B-4D2E-8A2F-9264AFAD9DE2", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.13:*:*:*:*:*:*:*", matchCriteriaId: "87259A2E-E132-45BA-8AC4-8CC50B1F659A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.3.14:*:*:*:*:*:*:*", matchCriteriaId: "76245991-1D91-4475-87E1-FBB77A1B3CDF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.0.1:*:*:*:*:*:*:*", matchCriteriaId: "1DD85E57-9A51-42DF-8BF7-E5701BAA64AE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.0.2:*:*:*:*:*:*:*", matchCriteriaId: "E983C5C3-C93C-4750-8DC5-31D6206335A8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.0.3:*:*:*:*:*:*:*", matchCriteriaId: "DEC8D212-6E8B-45F7-B7FB-9FFA64C1DB8F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.1:*:*:*:*:*:*:*", matchCriteriaId: "F03B2A6E-1D63-42F2-BB31-18EC120B6543", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.2:*:*:*:*:*:*:*", matchCriteriaId: "3BC83C4B-7C06-40D7-9EF6-76E752E5724B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.3:*:*:*:*:*:*:*", matchCriteriaId: "5C1E1CC9-81A7-47D5-87AC-86703E257D29", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.4:*:*:*:*:*:*:*", matchCriteriaId: "D716D8C4-2089-4E61-9487-B2085B74B5BF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.4.1:*:*:*:*:*:*:*", matchCriteriaId: "1BBC5AAD-34E1-48A5-972A-A09D66EFE825", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.4.2:*:*:*:*:*:*:*", matchCriteriaId: "79E26DC8-1030-4F3F-96B9-6BF159D86FCE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.8:*:*:*:*:*:*:*", matchCriteriaId: "40507A48-FD3B-4309-B017-A1644C5C3520", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.9:*:*:*:*:*:*:*", matchCriteriaId: "0211EBCA-144F-4BDD-8F0C-E5F7BDF96E7A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.10:*:*:*:*:*:*:*", matchCriteriaId: "7A52E699-6C08-4324-AD38-E8D40A02701F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.11:*:*:*:*:*:*:*", matchCriteriaId: "94C493CA-CBF0-4D15-8D1A-0E972E31F7A6", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.12:*:*:*:*:*:*:*", matchCriteriaId: "C398219E-503D-4DE5-85E8-5570536D6FB9", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.13:*:*:*:*:*:*:*", matchCriteriaId: "BBF91088-0BD3-48EB-8D19-C05F156D4A19", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.4.14:*:*:*:*:*:*:*", matchCriteriaId: "3441D193-DA62-4AC1-8E50-3AEEF8C659F3", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.0.1:*:*:*:*:*:*:*", matchCriteriaId: "E0868B12-EDF9-42D9-BB43-15F623A3310B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.0.2:*:*:*:*:*:*:*", matchCriteriaId: "F710949D-F0FE-43F4-ADB3-6EB679A70280", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.0.3:*:*:*:*:*:*:*", matchCriteriaId: "DCB75144-2437-40A8-8CA3-A487B603F7DE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.0.4:*:*:*:*:*:*:*", matchCriteriaId: "6CED2CB3-BE78-4818-A6D7-847A1ACE74DC", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.1:*:*:*:*:*:*:*", matchCriteriaId: "705D8320-A278-483A-AE47-802044CE685E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.2:*:*:*:*:*:*:*", matchCriteriaId: "715634E1-F7BE-4106-BDA7-B7D147EEA800", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.3:*:*:*:*:*:*:*", matchCriteriaId: "21E9E155-FC6F-46E7-8BF7-65DF097409D3", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.4:*:*:*:*:*:*:*", matchCriteriaId: "CF72FA7A-E35D-4000-9DDA-71E55EA3A4D4", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.5:*:*:*:*:*:*:*", matchCriteriaId: "26A3F10F-938E-44D6-845D-B66EF9812C21", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.6:*:*:*:*:*:*:*", matchCriteriaId: "B1D82EEE-F65E-4657-B0F7-6CE33D219134", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.7:*:*:*:*:*:*:*", matchCriteriaId: "C9E6A845-B67C-4112-8240-9F61D6AF3B0D", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.8:*:*:*:*:*:*:*", matchCriteriaId: "4BEDD7E3-E263-4A09-9C11-3E008E01BC28", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.9:*:*:*:*:*:*:*", matchCriteriaId: "80E3FF16-A6CD-456C-B58A-381A75D8616C", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.10:*:*:*:*:*:*:*", matchCriteriaId: "87D02AB2-AA26-4416-B689-02C5EEF2099C", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.11:*:*:*:*:*:*:*", matchCriteriaId: "A134E1F1-AFCC-498B-8840-5884CF858769", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.12:*:*:*:*:*:*:*", matchCriteriaId: "D5F4E7D0-B6F4-476E-A011-55619E91A3B0", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.13:*:*:*:*:*:*:*", matchCriteriaId: "95588755-27E8-4DB7-B865-A784D3638FE8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.14:*:*:*:*:*:*:*", matchCriteriaId: "2CD4DDBC-4243-459A-B43D-FF8F0AE0BA3C", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.15:*:*:*:*:*:*:*", matchCriteriaId: "0F90E11F-FC03-46D9-A9C4-A578196D59D8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.5.16:*:*:*:*:*:*:*", matchCriteriaId: "EDC9BEE2-D7E4-4192-963C-E9F2364FC8CE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*", matchCriteriaId: "060FCBEA-DEAA-42FB-88C9-4B78136B172F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*", matchCriteriaId: "74987102-8CA8-4120-B686-F18579A96A46", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*", matchCriteriaId: "DA7828AA-48B6-44CD-8507-345A4F0A25BC", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*", matchCriteriaId: "6640F25F-CC8B-4B05-A97A-2186BD0B5ED8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*", matchCriteriaId: "A037F780-6FC9-4130-908F-B5434FA0C7DE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*", matchCriteriaId: "1DDEB455-F082-44E4-8CEA-019C0084BF05", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*", matchCriteriaId: "49555803-288E-4B0A-B12A-890E5E0AD05F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*", matchCriteriaId: "EBEE374C-365E-49DE-A9F9-6083044C774D", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*", matchCriteriaId: "CC7A498A-A669-4C42-8134-86103C799D13", vulnerable: true, }, { criteria: "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*", matchCriteriaId: "104DA87B-DEE4-4262-AE50-8E6BC43B228B", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", matchCriteriaId: "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F", vulnerable: true, }, { criteria: "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", matchCriteriaId: "B5A6F2F3-4894-4392-8296-3B8DD2679084", vulnerable: true, }, { criteria: "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", matchCriteriaId: "E88A537F-F4D0-46B9-9E37-965233C2A355", vulnerable: true, }, { criteria: "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", matchCriteriaId: "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.", }, { lang: "es", value: "Squid 3.x en versiones anteriores a 3.5.17 y 4.x en versiones anteriores a 4.0.9 permite a atacantes remotos obtener información sensible sobre la estructura de pila a través de respuestas Edge Side Includes (ESI) manipuladas, relacionado con el uso incorrecto de assert y optimización del compilador.", }, ], id: "CVE-2016-4053", lastModified: "2024-11-21T02:51:14.910", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, exploitabilityScore: 2.2, impactScore: 1.4, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2016-04-25T14:59:04.533", references: [ { source: "cve@mitre.org", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { source: "cve@mitre.org", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { source: "cve@mitre.org", url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { source: "cve@mitre.org", url: "http://www.debian.org/security/2016/dsa-3625", }, { source: "cve@mitre.org", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { source: "cve@mitre.org", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { source: "cve@mitre.org", tags: [ "Patch", "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { source: "cve@mitre.org", url: "http://www.securityfocus.com/bid/86788", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/91787", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1035647", }, { source: "cve@mitre.org", tags: [ "Vendor Advisory", ], url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "http://www.ubuntu.com/usn/USN-2995-1", }, { source: "cve@mitre.org", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { source: "cve@mitre.org", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { source: "cve@mitre.org", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { source: "cve@mitre.org", url: "https://security.gentoo.org/glsa/201607-01", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2016/dsa-3625", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/6", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://www.openwall.com/lists/oss-security/2016/04/20/9", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/86788", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/91787", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1035647", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://www.squid-cache.org/Advisories/SQUID-2016_6.txt", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "http://www.ubuntu.com/usn/USN-2995-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://access.redhat.com/errata/RHSA-2016:1138", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://access.redhat.com/errata/RHSA-2016:1139", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://access.redhat.com/errata/RHSA-2016:1140", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://security.gentoo.org/glsa/201607-01", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-119", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.