NetSight
IP …
high8.2

CVE-2016-3947

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers…

Impact

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.

Affected products

VendorProductAffected versions
Squid-CacheSquid
through 3.5.15
Versions 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04

Weakness classification

CWE-119

References