Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
Configuration 2 (hide)
| 
 | 
Configuration 3 (hide)
| 
 | 
History
                    21 Nov 2024, 02:51
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - | |
| References | () http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - | |
| References | () http://www.debian.org/security/2016/dsa-3625 - | |
| References | () http://www.openwall.com/lists/oss-security/2016/04/20/6 - Mailing List, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2016/04/20/9 - Mailing List, Third Party Advisory | |
| References | () http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - Patch, Third Party Advisory | |
| References | () http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/86788 - | |
| References | () http://www.securityfocus.com/bid/91787 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1035647 - Third Party Advisory, VDB Entry | |
| References | () http://www.squid-cache.org/Advisories/SQUID-2016_6.txt - Vendor Advisory | |
| References | () http://www.ubuntu.com/usn/USN-2995-1 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2016:1138 - | |
| References | () https://access.redhat.com/errata/RHSA-2016:1139 - | |
| References | () https://access.redhat.com/errata/RHSA-2016:1140 - | |
| References | () https://security.gentoo.org/glsa/201607-01 - | 
Information
                Published : 2016-04-25 14:59
Updated : 2025-04-12 10:46
NVD link : CVE-2016-4053
Mitre link : CVE-2016-4053
CVE.ORG link : CVE-2016-4053
JSON object : View
Products Affected
                oracle
- linux
canonical
- ubuntu_linux
squid-cache
- squid
CWE
                
                    
                        
                        CWE-119
                        
            Improper Restriction of Operations within the Bounds of a Memory Buffer
