CVE-2016-4052

Published: 25 April 2016

Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.

Priority

Medium

CVSS 3 base score: 8.1

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4052
• https://marc.info/?l=oss-security&m=146116724827962&w=2
• http://www.squid-cache.org/Advisories/SQUID-2016_6.txt
• https://ubuntu.com/security/notices/USN-2995-1
• NVD
• Launchpad
• Debian

Bugs