Description (CNA)
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.openwall.com/lists/oss-security/2016/12/18/1
- http://www.securitytracker.com/id/1037512
- http://www.securityfocus.com/bid/94953
- http://www.squid-cache.org/Advisories/SQUID-2016_10.txt
ADP enrichment
No English description supplied.