Описание
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| squid3 | fixed | 3.5.16-1 | package | |
| squid3 | no-dsa | wheezy | package | |
| squid | fixed | 4.1-1 | package | |
| squid | no-dsa | wheezy | package |
Примечания
http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14016.patch
http://www.squid-cache.org/Advisories/SQUID-2016_4.txt
EPSS
Связанные уязвимости
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
ELSA-2016-2600: squid security, bug fix, and enhancement update (MODERATE)
EPSS