| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-4556 | 5.0 |
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response. <a href="http://cwe.mitre.org/data/definitions/415.html">
|
27-12-2019 - 16:08 | 10-05-2016 - 19:59 | |
| CVE-2016-4554 | 5.0 |
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
|
27-12-2019 - 16:08 | 10-05-2016 - 19:59 | |
| CVE-2016-4053 | 4.3 |
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
|
27-12-2019 - 16:08 | 25-04-2016 - 14:59 | |
| CVE-2016-4051 | 6.8 |
Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.
|
27-12-2019 - 16:08 | 25-04-2016 - 14:59 | |
| CVE-2016-4054 | 6.8 |
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
|
27-12-2019 - 16:08 | 25-04-2016 - 14:59 | |
| CVE-2016-4052 | 6.8 |
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.
|
30-11-2016 - 03:06 | 25-04-2016 - 14:59 |