high7.5
CVE-2016-10003
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenl…
Impact
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Squid-Cache | Squid | from 3.5.0.1 before 3.5.23 from 4.0.1 before 4.0.17 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/12/18/1
- http://www.securityfocus.com/bid/94953
- http://www.securitytracker.com/id/1037512
- http://www.squid-cache.org/Advisories/SQUID-2016_10.txt
- http://www.openwall.com/lists/oss-security/2016/12/18/1
- http://www.securityfocus.com/bid/94953
- http://www.securitytracker.com/id/1037512
- http://www.squid-cache.org/Advisories/SQUID-2016_10.txt