Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-10003

Опубликовано: 27 янв. 2017
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*
Версия от 3.5.0.1 (включая) до 3.5.23 (исключая)
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*
Версия от 4.0.1 (включая) до 4.0.17 (исключая)

EPSS

Процентиль: 91%
0.04772
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-697

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 9 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

CVSS3: 3.7
redhat
больше 9 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

CVSS3: 7.5
debian
больше 9 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 t ...

CVSS3: 7.5
github
больше 4 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

suse-cvrf
больше 9 лет назад

Security update for squid

EPSS

Процентиль: 91%
0.04772
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-697