1. Home
  2. Vulnerabilities
  3. CVE-2016-4053

CVE-2016-4053

CVSS v3.0 3.7 (Low)
37% Progress
CVSS v2.0 4.3 (Medium)
43% Progress
EPSS 0.56 % (78th)
0.56% Progress
Affected Products 3
Advisories 15
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.

Weaknesses
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2016-04-25 14:59:04
(8 years ago)
Updated Date
2019-12-27 16:08:55
(4 years ago)

Affected Products

Canonical

Oracle

Squid-cache

Configuration #1

    CPE23 From Up To
  Squid-cache Squid 3.0 cpe:2.3:a:squid-cache:squid:3.0
  Squid-cache Squid 3.1 cpe:2.3:a:squid-cache:squid:3.1
  Squid-cache Squid 3.1.0.1 cpe:2.3:a:squid-cache:squid:3.1.0.1
  Squid-cache Squid 3.1.0.2 cpe:2.3:a:squid-cache:squid:3.1.0.2
  Squid-cache Squid 3.1.0.3 cpe:2.3:a:squid-cache:squid:3.1.0.3
  Squid-cache Squid 3.1.0.4 cpe:2.3:a:squid-cache:squid:3.1.0.4
  Squid-cache Squid 3.1.0.5 cpe:2.3:a:squid-cache:squid:3.1.0.5
  Squid-cache Squid 3.1.0.6 cpe:2.3:a:squid-cache:squid:3.1.0.6
  Squid-cache Squid 3.1.0.7 cpe:2.3:a:squid-cache:squid:3.1.0.7
  Squid-cache Squid 3.1.0.8 cpe:2.3:a:squid-cache:squid:3.1.0.8
  Squid-cache Squid 3.1.0.9 cpe:2.3:a:squid-cache:squid:3.1.0.9
  Squid-cache Squid 3.1.0.10 cpe:2.3:a:squid-cache:squid:3.1.0.10
  Squid-cache Squid 3.1.0.11 cpe:2.3:a:squid-cache:squid:3.1.0.11
  Squid-cache Squid 3.1.0.12 cpe:2.3:a:squid-cache:squid:3.1.0.12
  Squid-cache Squid 3.1.0.13 cpe:2.3:a:squid-cache:squid:3.1.0.13
  Squid-cache Squid 3.1.0.14 cpe:2.3:a:squid-cache:squid:3.1.0.14
  Squid-cache Squid 3.1.0.15 cpe:2.3:a:squid-cache:squid:3.1.0.15
  Squid-cache Squid 3.1.0.16 cpe:2.3:a:squid-cache:squid:3.1.0.16
  Squid-cache Squid 3.1.0.17 cpe:2.3:a:squid-cache:squid:3.1.0.17
  Squid-cache Squid 3.1.0.18 cpe:2.3:a:squid-cache:squid:3.1.0.18
  Squid-cache Squid 3.1.1 cpe:2.3:a:squid-cache:squid:3.1.1
  Squid-cache Squid 3.1.2 cpe:2.3:a:squid-cache:squid:3.1.2
  Squid-cache Squid 3.1.3 cpe:2.3:a:squid-cache:squid:3.1.3
  Squid-cache Squid 3.1.4 cpe:2.3:a:squid-cache:squid:3.1.4
  Squid-cache Squid 3.1.5 cpe:2.3:a:squid-cache:squid:3.1.5
  Squid-cache Squid 3.1.5.1 cpe:2.3:a:squid-cache:squid:3.1.5.1
  Squid-cache Squid 3.1.6 cpe:2.3:a:squid-cache:squid:3.1.6
  Squid-cache Squid 3.1.7 cpe:2.3:a:squid-cache:squid:3.1.7
  Squid-cache Squid 3.1.8 cpe:2.3:a:squid-cache:squid:3.1.8
  Squid-cache Squid 3.1.9 cpe:2.3:a:squid-cache:squid:3.1.9
  Squid-cache Squid 3.1.10 cpe:2.3:a:squid-cache:squid:3.1.10
  Squid-cache Squid 3.1.11 cpe:2.3:a:squid-cache:squid:3.1.11
  Squid-cache Squid 3.1.12 cpe:2.3:a:squid-cache:squid:3.1.12
  Squid-cache Squid 3.1.12.1 cpe:2.3:a:squid-cache:squid:3.1.12.1
  Squid-cache Squid 3.1.12.2 cpe:2.3:a:squid-cache:squid:3.1.12.2
  Squid-cache Squid 3.1.12.3 cpe:2.3:a:squid-cache:squid:3.1.12.3
  Squid-cache Squid 3.1.13 cpe:2.3:a:squid-cache:squid:3.1.13
  Squid-cache Squid 3.1.14 cpe:2.3:a:squid-cache:squid:3.1.14
  Squid-cache Squid 3.1.15 cpe:2.3:a:squid-cache:squid:3.1.15
  Squid-cache Squid 3.1.16 cpe:2.3:a:squid-cache:squid:3.1.16
  Squid-cache Squid 3.1.17 cpe:2.3:a:squid-cache:squid:3.1.17
  Squid-cache Squid 3.1.18 cpe:2.3:a:squid-cache:squid:3.1.18
  Squid-cache Squid 3.1.19 cpe:2.3:a:squid-cache:squid:3.1.19
  Squid-cache Squid 3.1.20 cpe:2.3:a:squid-cache:squid:3.1.20
  Squid-cache Squid 3.1.21 cpe:2.3:a:squid-cache:squid:3.1.21
  Squid-cache Squid 3.1.22 cpe:2.3:a:squid-cache:squid:3.1.22
  Squid-cache Squid 3.2.0.1 cpe:2.3:a:squid-cache:squid:3.2.0.1
  Squid-cache Squid 3.2.0.2 cpe:2.3:a:squid-cache:squid:3.2.0.2
  Squid-cache Squid 3.2.0.3 cpe:2.3:a:squid-cache:squid:3.2.0.3
  Squid-cache Squid 3.2.0.4 cpe:2.3:a:squid-cache:squid:3.2.0.4
  Squid-cache Squid 3.2.0.5 cpe:2.3:a:squid-cache:squid:3.2.0.5
  Squid-cache Squid 3.2.0.6 cpe:2.3:a:squid-cache:squid:3.2.0.6
  Squid-cache Squid 3.2.0.7 cpe:2.3:a:squid-cache:squid:3.2.0.7
  Squid-cache Squid 3.2.0.8 cpe:2.3:a:squid-cache:squid:3.2.0.8
  Squid-cache Squid 3.2.0.9 cpe:2.3:a:squid-cache:squid:3.2.0.9
  Squid-cache Squid 3.2.0.10 cpe:2.3:a:squid-cache:squid:3.2.0.10
  Squid-cache Squid 3.2.0.11 cpe:2.3:a:squid-cache:squid:3.2.0.11
  Squid-cache Squid 3.2.0.12 cpe:2.3:a:squid-cache:squid:3.2.0.12
  Squid-cache Squid 3.2.0.13 cpe:2.3:a:squid-cache:squid:3.2.0.13
  Squid-cache Squid 3.2.0.14 cpe:2.3:a:squid-cache:squid:3.2.0.14
  Squid-cache Squid 3.2.0.15 cpe:2.3:a:squid-cache:squid:3.2.0.15
  Squid-cache Squid 3.2.0.16 cpe:2.3:a:squid-cache:squid:3.2.0.16
  Squid-cache Squid 3.2.0.17 cpe:2.3:a:squid-cache:squid:3.2.0.17
  Squid-cache Squid 3.2.0.18 cpe:2.3:a:squid-cache:squid:3.2.0.18
  Squid-cache Squid 3.2.0.19 cpe:2.3:a:squid-cache:squid:3.2.0.19
  Squid-cache Squid 3.2.1 cpe:2.3:a:squid-cache:squid:3.2.1
  Squid-cache Squid 3.2.2 cpe:2.3:a:squid-cache:squid:3.2.2
  Squid-cache Squid 3.2.3 cpe:2.3:a:squid-cache:squid:3.2.3
  Squid-cache Squid 3.2.4 cpe:2.3:a:squid-cache:squid:3.2.4
  Squid-cache Squid 3.2.5 cpe:2.3:a:squid-cache:squid:3.2.5
  Squid-cache Squid 3.2.6 cpe:2.3:a:squid-cache:squid:3.2.6
  Squid-cache Squid 3.2.7 cpe:2.3:a:squid-cache:squid:3.2.7
  Squid-cache Squid 3.2.8 cpe:2.3:a:squid-cache:squid:3.2.8
  Squid-cache Squid 3.2.9 cpe:2.3:a:squid-cache:squid:3.2.9
  Squid-cache Squid 3.2.10 cpe:2.3:a:squid-cache:squid:3.2.10
  Squid-cache Squid 3.2.11 cpe:2.3:a:squid-cache:squid:3.2.11
  Squid-cache Squid 3.2.12 cpe:2.3:a:squid-cache:squid:3.2.12
  Squid-cache Squid 3.2.13 cpe:2.3:a:squid-cache:squid:3.2.13
  Squid-cache Squid 3.3.0 cpe:2.3:a:squid-cache:squid:3.3.0
  Squid-cache Squid 3.3.0.1 cpe:2.3:a:squid-cache:squid:3.3.0.1
  Squid-cache Squid 3.3.0.2 cpe:2.3:a:squid-cache:squid:3.3.0.2
  Squid-cache Squid 3.3.0.3 cpe:2.3:a:squid-cache:squid:3.3.0.3
  Squid-cache Squid 3.3.1 cpe:2.3:a:squid-cache:squid:3.3.1
  Squid-cache Squid 3.3.2 cpe:2.3:a:squid-cache:squid:3.3.2
  Squid-cache Squid 3.3.3 cpe:2.3:a:squid-cache:squid:3.3.3
  Squid-cache Squid 3.3.4 cpe:2.3:a:squid-cache:squid:3.3.4
  Squid-cache Squid 3.3.5 cpe:2.3:a:squid-cache:squid:3.3.5
  Squid-cache Squid 3.3.6 cpe:2.3:a:squid-cache:squid:3.3.6
  Squid-cache Squid 3.3.7 cpe:2.3:a:squid-cache:squid:3.3.7
  Squid-cache Squid 3.3.8 cpe:2.3:a:squid-cache:squid:3.3.8
  Squid-cache Squid 3.3.9 cpe:2.3:a:squid-cache:squid:3.3.9
  Squid-cache Squid 3.3.10 cpe:2.3:a:squid-cache:squid:3.3.10
  Squid-cache Squid 3.3.11 cpe:2.3:a:squid-cache:squid:3.3.11
  Squid-cache Squid 3.3.12 cpe:2.3:a:squid-cache:squid:3.3.12
  Squid-cache Squid 3.3.13 cpe:2.3:a:squid-cache:squid:3.3.13
  Squid-cache Squid 3.3.14 cpe:2.3:a:squid-cache:squid:3.3.14
  Squid-cache Squid 3.4.0.1 cpe:2.3:a:squid-cache:squid:3.4.0.1
  Squid-cache Squid 3.4.0.2 cpe:2.3:a:squid-cache:squid:3.4.0.2
  Squid-cache Squid 3.4.0.3 cpe:2.3:a:squid-cache:squid:3.4.0.3
  Squid-cache Squid 3.4.1 cpe:2.3:a:squid-cache:squid:3.4.1
  Squid-cache Squid 3.4.2 cpe:2.3:a:squid-cache:squid:3.4.2
  Squid-cache Squid 3.4.3 cpe:2.3:a:squid-cache:squid:3.4.3
  Squid-cache Squid 3.4.4 cpe:2.3:a:squid-cache:squid:3.4.4
  Squid-cache Squid 3.4.4.1 cpe:2.3:a:squid-cache:squid:3.4.4.1
  Squid-cache Squid 3.4.4.2 cpe:2.3:a:squid-cache:squid:3.4.4.2
  Squid-cache Squid 3.4.8 cpe:2.3:a:squid-cache:squid:3.4.8
  Squid-cache Squid 3.4.9 cpe:2.3:a:squid-cache:squid:3.4.9
  Squid-cache Squid 3.4.10 cpe:2.3:a:squid-cache:squid:3.4.10
  Squid-cache Squid 3.4.11 cpe:2.3:a:squid-cache:squid:3.4.11
  Squid-cache Squid 3.4.12 cpe:2.3:a:squid-cache:squid:3.4.12
  Squid-cache Squid 3.4.13 cpe:2.3:a:squid-cache:squid:3.4.13
  Squid-cache Squid 3.4.14 cpe:2.3:a:squid-cache:squid:3.4.14
  Squid-cache Squid 3.5.0.1 cpe:2.3:a:squid-cache:squid:3.5.0.1
  Squid-cache Squid 3.5.0.2 cpe:2.3:a:squid-cache:squid:3.5.0.2
  Squid-cache Squid 3.5.0.3 cpe:2.3:a:squid-cache:squid:3.5.0.3
  Squid-cache Squid 3.5.0.4 cpe:2.3:a:squid-cache:squid:3.5.0.4
  Squid-cache Squid 3.5.1 cpe:2.3:a:squid-cache:squid:3.5.1
  Squid-cache Squid 3.5.2 cpe:2.3:a:squid-cache:squid:3.5.2
  Squid-cache Squid 3.5.3 cpe:2.3:a:squid-cache:squid:3.5.3
  Squid-cache Squid 3.5.4 cpe:2.3:a:squid-cache:squid:3.5.4
  Squid-cache Squid 3.5.5 cpe:2.3:a:squid-cache:squid:3.5.5
  Squid-cache Squid 3.5.6 cpe:2.3:a:squid-cache:squid:3.5.6
  Squid-cache Squid 3.5.7 cpe:2.3:a:squid-cache:squid:3.5.7
  Squid-cache Squid 3.5.8 cpe:2.3:a:squid-cache:squid:3.5.8
  Squid-cache Squid 3.5.9 cpe:2.3:a:squid-cache:squid:3.5.9
  Squid-cache Squid 3.5.10 cpe:2.3:a:squid-cache:squid:3.5.10
  Squid-cache Squid 3.5.11 cpe:2.3:a:squid-cache:squid:3.5.11
  Squid-cache Squid 3.5.12 cpe:2.3:a:squid-cache:squid:3.5.12
  Squid-cache Squid 3.5.13 cpe:2.3:a:squid-cache:squid:3.5.13
  Squid-cache Squid 3.5.14 cpe:2.3:a:squid-cache:squid:3.5.14
  Squid-cache Squid 3.5.15 cpe:2.3:a:squid-cache:squid:3.5.15
  Squid-cache Squid 3.5.16 cpe:2.3:a:squid-cache:squid:3.5.16
  Squid-cache Squid 4.0.1 cpe:2.3:a:squid-cache:squid:4.0.1
  Squid-cache Squid 4.0.2 cpe:2.3:a:squid-cache:squid:4.0.2
  Squid-cache Squid 4.0.3 cpe:2.3:a:squid-cache:squid:4.0.3
  Squid-cache Squid 4.0.4 cpe:2.3:a:squid-cache:squid:4.0.4
  Squid-cache Squid 4.0.5 cpe:2.3:a:squid-cache:squid:4.0.5
  Squid-cache Squid 4.0.6 cpe:2.3:a:squid-cache:squid:4.0.6
  Squid-cache Squid 4.0.7 cpe:2.3:a:squid-cache:squid:4.0.7
  Squid-cache Squid 4.0.8 cpe:2.3:a:squid-cache:squid:4.0.8

Configuration #2

    CPE23 From Up To
  Oracle Linux 6 cpe:2.3:o:oracle:linux:6
  Oracle Linux 7 cpe:2.3:o:oracle:linux:7

Configuration #3

    CPE23 From Up To
  Canonical Ubuntu Linux 12.04 cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts
  Canonical Ubuntu Linux 14.04 cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts
  Canonical Ubuntu Linux 15.10 cpe:2.3:o:canonical:ubuntu_linux:15.10
  Canonical Ubuntu Linux 16.04 cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts