CVE-2016-4054

Description (CNA)

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.squid-cache.org/Advisories/SQUID-2016_6.txt
• https://security.gentoo.org/glsa/201607-01
• http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html
• http://www.openwall.com/lists/oss-security/2016/04/20/6
• http://www.ubuntu.com/usn/USN-2995-1
• https://access.redhat.com/errata/RHSA-2016:1140
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
• https://access.redhat.com/errata/RHSA-2016:1138
• https://access.redhat.com/errata/RHSA-2016:1139
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html
• http://www.openwall.com/lists/oss-security/2016/04/20/9
• http://www.securitytracker.com/id/1035647
• http://www.debian.org/security/2016/dsa-3625
• http://www.securityfocus.com/bid/86788

ADP enrichment