Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

CVE-2016-2571

MEDIUMCVSS v2

Published

February 27, 2016

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

squid-cache/squid

GitHubSquid Web Proxy Cache - Source Code

= 3.2.0.18, = 3.1.0.18, = 3.0.stable13, = 3.3.3, = 3.2.0.9, = 3.3.11, = 3.0, = 4.0.5, = 3.0.stable9, = 4.0.3, = 3.3.5, = 3.3.0.3, = 3.2.4, = 3.1.1, = 3.0.stable4, = 3.0.stable20, = 3.3.13, = 3.2.0.15, = 3.1.13, = 3.1.0.7, = 3.1.0.14, = 3.2.2, = 3.2.0.6, = 3.2.0.1, = 3.0.stable3, = 3.1.0.12, = 3.0.stable14, = 3.4.2, = 3.4.13, = 3.4.0.1, = 3.4.10, = 3.3.1, = 3.2.5, = 3.2.0.19, = 3.1.0.3, = 3.2.13, = 3.2.12, = 3.1.8, = 3.1.6, = 3.1.14, = 3.0.stable24, = 3.0.stable16, = 3.0.stable1, = 4.0.1, = 3.5.1, = 3.4.3, = 3.3.2, = 3.3.0.2, = 3.3.0, = 3.2.0.16, = 3.1.0.9, = 3.1.0.1, = 3.0.stable18, = 3.0.stable11, = 3.5.0.2, = 3.5.0.1, = 3.3.7, = 3.2.10, = 3.2.0.13, = 3.5.0.4, = 3.5.0.3, = 3.3.9, = 4.0.4, = 3.4.9, = 3.4.8, = 3.4.1, = 3.3.6, = 3.3.4, = 3.2.0.8, = 3.2.0.11, = 3.2.0.10, = 3.1.4, = 3.1.3, = 3.1.10, = 3.1.0.2, = 3.1.0.11, = 3.1.0.10, = 3.0.stable5, = 3.0.stable2, = 3.3.12, = 3.2.9, = 3.2.8, = 3.2.0.5, = 3.2.0.4, = 3.2.0.14, = 3.1.7, = 3.1.0.6, = 3.1.0.16, = 3.1.0.15, = 3.0.stable8, = 3.0.stable23, = 3.0.stable10, = 4.0.2, = 3.4.0.2, = 3.2.3, = 3.2.0.7, = 3.1.9, = 3.1.2, = 3.1.15, = 3.1.0.8, = 3.1, = 3.0.stable25, = 3.0.stable17, = 4.0.6, = 3.4.12, = 3.4.11, = 3.3.8, = 3.3.10, = 3.2.6, = 3.2.11, = 3.2.1, = 3.2.0.3, = 3.2.0.2, = 3.2.0.12, = 3.1.5.1, = 3.1.5, = 3.1.12, = 3.1.11, = 3.1.0.5, = 3.1.0.4, = 3.1.0.13, = 3.0.stable6, = 3.0.stable22, = 3.0.stable21, = 3.0.stable15, = 3.0.stable12, = 3.4.4, = 3.4.0.3, = 3.2.0.17, = 3.1.0.17, = 3.0.stable19, = 3.2.7, = 3.0.stable7NVD

squid

Security Advisories

CVE-2016-2571

Description

More on this CVE