CVE-2016-10003

Summary

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2016/12/18/1
• http://www.securitytracker.com/id/1037512
• http://www.securityfocus.com/bid/94953
• http://www.squid-cache.org/Advisories/SQUID-2016_10.txt

References

• http://www.openwall.com/lists/oss-security/2016/12/18/1
• http://www.securitytracker.com/id/1037512
• http://www.securityfocus.com/bid/94953
• http://www.squid-cache.org/Advisories/SQUID-2016_10.txt

• ←Previous
• Next→