CVE-2016-4053
Summary
| CVE | CVE-2016-4053 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-04-25 14:59:04 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization. |
Risk And Classification
Primary CVSS: v3.0 3.7 LOW from [email protected]
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Problem Types: CWE-119 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 3.7 | LOW | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
| 2.0 | [email protected] | Primary | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
HighPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
LowIntegrity
NoneAvailability
NoneCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:M/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Canonical | Ubuntu Linux | 12.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 14.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 15.10 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 16.04 | All | All | All |
| Operating System | Oracle | Linux | 6 | All | All | All |
| Operating System | Oracle | Linux | 7 | All | All | All |
| Application | Squid-cache | Squid | 3.0 | All | All | All |
| Application | Squid-cache | Squid | 3.1 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.1 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.10 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.11 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.12 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.13 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.14 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.15 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.16 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.17 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.18 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.2 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.3 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.4 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.5 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.6 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.7 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.8 | All | All | All |
| Application | Squid-cache | Squid | 3.1.0.9 | All | All | All |
| Application | Squid-cache | Squid | 3.1.1 | All | All | All |
| Application | Squid-cache | Squid | 3.1.10 | All | All | All |
| Application | Squid-cache | Squid | 3.1.11 | All | All | All |
| Application | Squid-cache | Squid | 3.1.12 | All | All | All |
| Application | Squid-cache | Squid | 3.1.12.1 | All | All | All |
| Application | Squid-cache | Squid | 3.1.12.2 | All | All | All |
| Application | Squid-cache | Squid | 3.1.12.3 | All | All | All |
| Application | Squid-cache | Squid | 3.1.13 | All | All | All |
| Application | Squid-cache | Squid | 3.1.14 | All | All | All |
| Application | Squid-cache | Squid | 3.1.15 | All | All | All |
| Application | Squid-cache | Squid | 3.1.16 | All | All | All |
| Application | Squid-cache | Squid | 3.1.17 | All | All | All |
| Application | Squid-cache | Squid | 3.1.18 | All | All | All |
| Application | Squid-cache | Squid | 3.1.19 | All | All | All |
| Application | Squid-cache | Squid | 3.1.2 | All | All | All |
| Application | Squid-cache | Squid | 3.1.20 | All | All | All |
| Application | Squid-cache | Squid | 3.1.21 | All | All | All |
| Application | Squid-cache | Squid | 3.1.22 | All | All | All |
| Application | Squid-cache | Squid | 3.1.3 | All | All | All |
| Application | Squid-cache | Squid | 3.1.4 | All | All | All |
| Application | Squid-cache | Squid | 3.1.5 | All | All | All |
| Application | Squid-cache | Squid | 3.1.5.1 | All | All | All |
| Application | Squid-cache | Squid | 3.1.6 | All | All | All |
| Application | Squid-cache | Squid | 3.1.7 | All | All | All |
| Application | Squid-cache | Squid | 3.1.8 | All | All | All |
| Application | Squid-cache | Squid | 3.1.9 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.1 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.10 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.11 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.12 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.13 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.14 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.15 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.16 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.17 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.18 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.19 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.2 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.3 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.4 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.5 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.6 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.7 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.8 | All | All | All |
| Application | Squid-cache | Squid | 3.2.0.9 | All | All | All |
| Application | Squid-cache | Squid | 3.2.1 | All | All | All |
| Application | Squid-cache | Squid | 3.2.10 | All | All | All |
| Application | Squid-cache | Squid | 3.2.11 | All | All | All |
| Application | Squid-cache | Squid | 3.2.12 | All | All | All |
| Application | Squid-cache | Squid | 3.2.13 | All | All | All |
| Application | Squid-cache | Squid | 3.2.2 | All | All | All |
| Application | Squid-cache | Squid | 3.2.3 | All | All | All |
| Application | Squid-cache | Squid | 3.2.4 | All | All | All |
| Application | Squid-cache | Squid | 3.2.5 | All | All | All |
| Application | Squid-cache | Squid | 3.2.6 | All | All | All |
| Application | Squid-cache | Squid | 3.2.7 | All | All | All |
| Application | Squid-cache | Squid | 3.2.8 | All | All | All |
| Application | Squid-cache | Squid | 3.2.9 | All | All | All |
| Application | Squid-cache | Squid | 3.3.0 | All | All | All |
| Application | Squid-cache | Squid | 3.3.0.1 | All | All | All |
| Application | Squid-cache | Squid | 3.3.0.2 | All | All | All |
| Application | Squid-cache | Squid | 3.3.0.3 | All | All | All |
| Application | Squid-cache | Squid | 3.3.1 | All | All | All |
| Application | Squid-cache | Squid | 3.3.10 | All | All | All |
| Application | Squid-cache | Squid | 3.3.11 | All | All | All |
| Application | Squid-cache | Squid | 3.3.12 | All | All | All |
| Application | Squid-cache | Squid | 3.3.13 | All | All | All |
| Application | Squid-cache | Squid | 3.3.14 | All | All | All |
| Application | Squid-cache | Squid | 3.3.2 | All | All | All |
| Application | Squid-cache | Squid | 3.3.3 | All | All | All |
| Application | Squid-cache | Squid | 3.3.4 | All | All | All |
| Application | Squid-cache | Squid | 3.3.5 | All | All | All |
| Application | Squid-cache | Squid | 3.3.6 | All | All | All |
| Application | Squid-cache | Squid | 3.3.7 | All | All | All |
| Application | Squid-cache | Squid | 3.3.8 | All | All | All |
| Application | Squid-cache | Squid | 3.3.9 | All | All | All |
| Application | Squid-cache | Squid | 3.4.0.1 | All | All | All |
| Application | Squid-cache | Squid | 3.4.0.2 | All | All | All |
| Application | Squid-cache | Squid | 3.4.0.3 | All | All | All |
| Application | Squid-cache | Squid | 3.4.1 | All | All | All |
| Application | Squid-cache | Squid | 3.4.10 | All | All | All |
| Application | Squid-cache | Squid | 3.4.11 | All | All | All |
| Application | Squid-cache | Squid | 3.4.12 | All | All | All |
| Application | Squid-cache | Squid | 3.4.13 | All | All | All |
| Application | Squid-cache | Squid | 3.4.14 | All | All | All |
| Application | Squid-cache | Squid | 3.4.2 | All | All | All |
| Application | Squid-cache | Squid | 3.4.3 | All | All | All |
| Application | Squid-cache | Squid | 3.4.4 | All | All | All |
| Application | Squid-cache | Squid | 3.4.4.1 | All | All | All |
| Application | Squid-cache | Squid | 3.4.4.2 | All | All | All |
| Application | Squid-cache | Squid | 3.4.8 | All | All | All |
| Application | Squid-cache | Squid | 3.4.9 | All | All | All |
| Application | Squid-cache | Squid | 3.5.0.1 | All | All | All |
| Application | Squid-cache | Squid | 3.5.0.2 | All | All | All |
| Application | Squid-cache | Squid | 3.5.0.3 | All | All | All |
| Application | Squid-cache | Squid | 3.5.0.4 | All | All | All |
| Application | Squid-cache | Squid | 3.5.1 | All | All | All |
| Application | Squid-cache | Squid | 3.5.10 | All | All | All |
| Application | Squid-cache | Squid | 3.5.11 | All | All | All |
| Application | Squid-cache | Squid | 3.5.12 | All | All | All |
| Application | Squid-cache | Squid | 3.5.13 | All | All | All |
| Application | Squid-cache | Squid | 3.5.14 | All | All | All |
| Application | Squid-cache | Squid | 3.5.15 | All | All | All |
| Application | Squid-cache | Squid | 3.5.16 | All | All | All |
| Application | Squid-cache | Squid | 3.5.2 | All | All | All |
| Application | Squid-cache | Squid | 3.5.3 | All | All | All |
| Application | Squid-cache | Squid | 3.5.4 | All | All | All |
| Application | Squid-cache | Squid | 3.5.5 | All | All | All |
| Application | Squid-cache | Squid | 3.5.6 | All | All | All |
| Application | Squid-cache | Squid | 3.5.7 | All | All | All |
| Application | Squid-cache | Squid | 3.5.8 | All | All | All |
| Application | Squid-cache | Squid | 3.5.9 | All | All | All |
| Application | Squid-cache | Squid | 4.0.1 | All | All | All |
| Application | Squid-cache | Squid | 4.0.2 | All | All | All |
| Application | Squid-cache | Squid | 4.0.3 | All | All | All |
| Application | Squid-cache | Squid | 4.0.4 | All | All | All |
| Application | Squid-cache | Squid | 4.0.5 | All | All | All |
| Application | Squid-cache | Squid | 4.0.6 | All | All | All |
| Application | Squid-cache | Squid | 4.0.7 | All | All | All |
| Application | Squid-cache | Squid | 4.0.8 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| openSUSE-SU-2016:2081-1: moderate: Security update for squid | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Squid: Multiple vulnerabilities (GLSA 201607-01) — Gentoo security | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| oss-security - Re: CVE Request: Squid HTTP Caching Proxy multiple issues | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Mailing List, Third Party Advisory |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Squid Multiple Buffer Overflow and Information Disclosure Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Oracle Critical Patch Update - July 2016 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Patch, Third Party Advisory |
| Squid Bugs in Processing ESI Responses Let Remote Users Obtain Potentially Sensitive Information and Execute Arbitrary Code - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| [security-announce] SUSE-SU-2016:1996-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| oss-security - CVE Request: Squid HTTP Caching Proxy multiple issues | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Mailing List, Third Party Advisory |
| www.squid-cache.org/Advisories/SQUID-2016_6.txt | af854a3a-2127-422b-91ae-364da2661108 | www.squid-cache.org | Vendor Advisory |
| USN-2995-1: Squid vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | Third Party Advisory |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Oracle Linux Bulletin - April 2016 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Third Party Advisory |
| Debian -- Security Information -- DSA-3625-1 squid3 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| [security-announce] SUSE-SU-2016:2089-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Oracle July 2016 Critical Patch Update Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.