CVE-2016-10002

5

MEDIUMCVSS v2

Published

January 27, 2017

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.

squid-cache/squid

GitHubSquid Web Proxy Cache - Source Code

= 3.1.21, = 3.1.17, = 3.1.22, = 3.1.18, = 3.1.14, = 3.1.23, = 3.1.15, = 3.1.12, = 3.1.10, = 3.1.16, = 3.1.11, = 3.1.19, = 3.1.20, = 3.2.0.18, = 3.2.0.9, = 3.2.2, = 3.2.4, = 3.2.0.6, = 3.2.0.15, = 3.2.10, = 3.2.13, = 3.2.0.19, = 3.2.0.7, = 3.2.9, = 3.2.14, = 3.2.0.16, = 3.2.0.8, = 3.2.3, = 3.2.0.12, = 3.2.0.13, = 3.2.0.4, = 3.2.11, = 3.2.12, = 3.2.8, = 3.2.0.10, = 3.2.0.11, = 3.2.0.3, = 3.2.1, = 3.2.5, = 3.2.6, = 3.2.0.14, = 3.2.0.17, = 3.2.0.5, = 3.2.7, = 3.3.3, = 3.3.11, = 3.3.0.1, = 3.3.5, = 3.3.0.3, = 3.3.13, = 3.3.7, = 3.3.2, = 3.3.1, = 3.3.14, = 3.3.8, = 3.3.9, = 3.3.0.2, = 3.3.12, = 3.3.6, = 3.3.10, = 3.3.4, = 3.4.0.4, = 3.4.2, = 3.4.10, = 3.4.3, = 3.4.5, = 3.4.0.1, = 3.4.13, = 3.4.7, = 3.4.14, = 3.4.11, = 3.4.12, = 3.4.0.2, = 3.4.0.3, = 3.4.8, = 3.4.9, = 3.4.4, = 3.4.6, = 3.4.1, = 3.5.2, = 3.5.19, = 3.5.11, = 3.5.4, = 3.5.7, = 3.5.0.2, = 3.5.0.1, = 3.5.22, = 3.5.13, = 3.5.6, = 3.5.15, = 3.5.16, = 3.5.8, = 3.5.9, = 3.5.17, = 3.5.18, = 3.5.0.3, = 3.5.0.4, = 3.5.5, = 3.5.12, = 3.5.14, = 3.5.21, = 3.5.3, = 3.5.10, = 3.5.20, = 3.5.1, = 4.0.11, = 4.0.5, = 4.0.3, = 4.0.12, = 4.0.1, = 4.0.14, = 4.0.8, = 4.0.13, = 4.0.2, = 4.0.9, = 4.0.10, = 4.0.7, = 4.0.15, = 4.0.16, = 4.0.4, = 4.0.6NVD

squid

NPM

More on this CVE

NVD↗GitHub Advisory↗

Provides SQL tagged template strings and a schema definition function.

= 3.1.21, = 3.1.17, = 3.1.22, = 3.1.18, = 3.1.14, = 3.1.23, = 3.1.15, = 3.1.12, = 3.1.10, = 3.1.16, = 3.1.11, = 3.1.19, = 3.1.20, = 3.2.0.18, = 3.2.0.9, = 3.2.2, = 3.2.4, = 3.2.0.6, = 3.2.0.15, = 3.2.10, = 3.2.13, = 3.2.0.19, = 3.2.0.7, = 3.2.9, = 3.2.14, = 3.2.0.16, = 3.2.0.8, = 3.2.3, = 3.2.0.12, = 3.2.0.13, = 3.2.0.4, = 3.2.11, = 3.2.12, = 3.2.8, = 3.2.0.10, = 3.2.0.11, = 3.2.0.3, = 3.2.1, = 3.2.5, = 3.2.6, = 3.2.0.14, = 3.2.0.17, = 3.2.0.5, = 3.2.7, = 3.3.3, = 3.3.11, = 3.3.0.1, = 3.3.5, = 3.3.0.3, = 3.3.13, = 3.3.7, = 3.3.2, = 3.3.1, = 3.3.14, = 3.3.8, = 3.3.9, = 3.3.0.2, = 3.3.12, = 3.3.6, = 3.3.10, = 3.3.4, = 3.4.0.4, = 3.4.2, = 3.4.10, = 3.4.3, = 3.4.5, = 3.4.0.1, = 3.4.13, = 3.4.7, = 3.4.14, = 3.4.11, = 3.4.12, = 3.4.0.2, = 3.4.0.3, = 3.4.8, = 3.4.9, = 3.4.4, = 3.4.6, = 3.4.1, = 3.5.2, = 3.5.19, = 3.5.11, = 3.5.4, = 3.5.7, = 3.5.0.2, = 3.5.0.1, = 3.5.22, = 3.5.13, = 3.5.6, = 3.5.15, = 3.5.16, = 3.5.8, = 3.5.9, = 3.5.17, = 3.5.18, = 3.5.0.3, = 3.5.0.4, = 3.5.5, = 3.5.12, = 3.5.14, = 3.5.21, = 3.5.3, = 3.5.10, = 3.5.20, = 3.5.1, = 4.0.11, = 4.0.5, = 4.0.3, = 4.0.12, = 4.0.1, = 4.0.14, = 4.0.8, = 4.0.13, = 4.0.2, = 4.0.9, = 4.0.10, = 4.0.7, = 4.0.15, = 4.0.16, = 4.0.4, = 4.0.6NVD

squid

RubyGemsSquid expands Prawn providing method to easily draw graphs in PDF files.

= 3.1.21, = 3.1.17, = 3.1.22, = 3.1.18, = 3.1.14, = 3.1.23, = 3.1.15, = 3.1.12, = 3.1.10, = 3.1.16, = 3.1.11, = 3.1.19, = 3.1.20, = 3.2.0.18, = 3.2.0.9, = 3.2.2, = 3.2.4, = 3.2.0.6, = 3.2.0.15, = 3.2.10, = 3.2.13, = 3.2.0.19, = 3.2.0.7, = 3.2.9, = 3.2.14, = 3.2.0.16, = 3.2.0.8, = 3.2.3, = 3.2.0.12, = 3.2.0.13, = 3.2.0.4, = 3.2.11, = 3.2.12, = 3.2.8, = 3.2.0.10, = 3.2.0.11, = 3.2.0.3, = 3.2.1, = 3.2.5, = 3.2.6, = 3.2.0.14, = 3.2.0.17, = 3.2.0.5, = 3.2.7, = 3.3.3, = 3.3.11, = 3.3.0.1, = 3.3.5, = 3.3.0.3, = 3.3.13, = 3.3.7, = 3.3.2, = 3.3.1, = 3.3.14, = 3.3.8, = 3.3.9, = 3.3.0.2, = 3.3.12, = 3.3.6, = 3.3.10, = 3.3.4, = 3.4.0.4, = 3.4.2, = 3.4.10, = 3.4.3, = 3.4.5, = 3.4.0.1, = 3.4.13, = 3.4.7, = 3.4.14, = 3.4.11, = 3.4.12, = 3.4.0.2, = 3.4.0.3, = 3.4.8, = 3.4.9, = 3.4.4, = 3.4.6, = 3.4.1, = 3.5.2, = 3.5.19, = 3.5.11, = 3.5.4, = 3.5.7, = 3.5.0.2, = 3.5.0.1, = 3.5.22, = 3.5.13, = 3.5.6, = 3.5.15, = 3.5.16, = 3.5.8, = 3.5.9, = 3.5.17, = 3.5.18, = 3.5.0.3, = 3.5.0.4, = 3.5.5, = 3.5.12, = 3.5.14, = 3.5.21, = 3.5.3, = 3.5.10, = 3.5.20, = 3.5.1, = 4.0.11, = 4.0.5, = 4.0.3, = 4.0.12, = 4.0.1, = 4.0.14, = 4.0.8, = 4.0.13, = 4.0.2, = 4.0.9, = 4.0.10, = 4.0.7, = 4.0.15, = 4.0.16, = 4.0.4, = 4.0.6NVD

nullscreen/squid

GitHubA Ruby library to plot charts in PDF files

= 3.1.21, = 3.1.17, = 3.1.22, = 3.1.18, = 3.1.14, = 3.1.23, = 3.1.15, = 3.1.12, = 3.1.10, = 3.1.16, = 3.1.11, = 3.1.19, = 3.1.20, = 3.2.0.18, = 3.2.0.9, = 3.2.2, = 3.2.4, = 3.2.0.6, = 3.2.0.15, = 3.2.10, = 3.2.13, = 3.2.0.19, = 3.2.0.7, = 3.2.9, = 3.2.14, = 3.2.0.16, = 3.2.0.8, = 3.2.3, = 3.2.0.12, = 3.2.0.13, = 3.2.0.4, = 3.2.11, = 3.2.12, = 3.2.8, = 3.2.0.10, = 3.2.0.11, = 3.2.0.3, = 3.2.1, = 3.2.5, = 3.2.6, = 3.2.0.14, = 3.2.0.17, = 3.2.0.5, = 3.2.7, = 3.3.3, = 3.3.11, = 3.3.0.1, = 3.3.5, = 3.3.0.3, = 3.3.13, = 3.3.7, = 3.3.2, = 3.3.1, = 3.3.14, = 3.3.8, = 3.3.9, = 3.3.0.2, = 3.3.12, = 3.3.6, = 3.3.10, = 3.3.4, = 3.4.0.4, = 3.4.2, = 3.4.10, = 3.4.3, = 3.4.5, = 3.4.0.1, = 3.4.13, = 3.4.7, = 3.4.14, = 3.4.11, = 3.4.12, = 3.4.0.2, = 3.4.0.3, = 3.4.8, = 3.4.9, = 3.4.4, = 3.4.6, = 3.4.1, = 3.5.2, = 3.5.19, = 3.5.11, = 3.5.4, = 3.5.7, = 3.5.0.2, = 3.5.0.1, = 3.5.22, = 3.5.13, = 3.5.6, = 3.5.15, = 3.5.16, = 3.5.8, = 3.5.9, = 3.5.17, = 3.5.18, = 3.5.0.3, = 3.5.0.4, = 3.5.5, = 3.5.12, = 3.5.14, = 3.5.21, = 3.5.3, = 3.5.10, = 3.5.20, = 3.5.1, = 4.0.11, = 4.0.5, = 4.0.3, = 4.0.12, = 4.0.1, = 4.0.14, = 4.0.8, = 4.0.13, = 4.0.2, = 4.0.9, = 4.0.10, = 4.0.7, = 4.0.15, = 4.0.16, = 4.0.4, = 4.0.6NVD

claudiob/squid

GitHubA Ruby library to plot charts in PDF files

= 3.1.21, = 3.1.17, = 3.1.22, = 3.1.18, = 3.1.14, = 3.1.23, = 3.1.15, = 3.1.12, = 3.1.10, = 3.1.16, = 3.1.11, = 3.1.19, = 3.1.20, = 3.2.0.18, = 3.2.0.9, = 3.2.2, = 3.2.4, = 3.2.0.6, = 3.2.0.15, = 3.2.10, = 3.2.13, = 3.2.0.19, = 3.2.0.7, = 3.2.9, = 3.2.14, = 3.2.0.16, = 3.2.0.8, = 3.2.3, = 3.2.0.12, = 3.2.0.13, = 3.2.0.4, = 3.2.11, = 3.2.12, = 3.2.8, = 3.2.0.10, = 3.2.0.11, = 3.2.0.3, = 3.2.1, = 3.2.5, = 3.2.6, = 3.2.0.14, = 3.2.0.17, = 3.2.0.5, = 3.2.7, = 3.3.3, = 3.3.11, = 3.3.0.1, = 3.3.5, = 3.3.0.3, = 3.3.13, = 3.3.7, = 3.3.2, = 3.3.1, = 3.3.14, = 3.3.8, = 3.3.9, = 3.3.0.2, = 3.3.12, = 3.3.6, = 3.3.10, = 3.3.4, = 3.4.0.4, = 3.4.2, = 3.4.10, = 3.4.3, = 3.4.5, = 3.4.0.1, = 3.4.13, = 3.4.7, = 3.4.14, = 3.4.11, = 3.4.12, = 3.4.0.2, = 3.4.0.3, = 3.4.8, = 3.4.9, = 3.4.4, = 3.4.6, = 3.4.1, = 3.5.2, = 3.5.19, = 3.5.11, = 3.5.4, = 3.5.7, = 3.5.0.2, = 3.5.0.1, = 3.5.22, = 3.5.13, = 3.5.6, = 3.5.15, = 3.5.16, = 3.5.8, = 3.5.9, = 3.5.17, = 3.5.18, = 3.5.0.3, = 3.5.0.4, = 3.5.5, = 3.5.12, = 3.5.14, = 3.5.21, = 3.5.3, = 3.5.10, = 3.5.20, = 3.5.1, = 4.0.11, = 4.0.5, = 4.0.3, = 4.0.12, = 4.0.1, = 4.0.14, = 4.0.8, = 4.0.13, = 4.0.2, = 4.0.9, = 4.0.10, = 4.0.7, = 4.0.15, = 4.0.16, = 4.0.4, = 4.0.6NVD

Security Advisories

CVE-2016-10002

Description

More on this CVE