Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:PROXY:SQUID-ESI-BO |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Squid Proxy ESI Component Stack Buffer Overflow |
Release Date |
2016/05/19 |
Update Number |
2725 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Squid Proxy ESI Component Stack Buffer Overflow
A stack-based buffer overflow vulnerability has been reported in the Edge Side Includes (ESI) component of the Squid proxy. Successful exploitation allows the attacker to execute arbitrary code on the target under context of the service.
Extended Description
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
Affected Products
- Canonical ubuntu_linux 12.04
- Canonical ubuntu_linux 14.04
- Canonical ubuntu_linux 15.10
- Canonical ubuntu_linux 16.04
- Oracle linux 6
- Oracle linux 7
- Squid-cache squid 3.0
- Squid-cache squid 3.1
- Squid-cache squid 3.1.0.1
- Squid-cache squid 3.1.0.10
- Squid-cache squid 3.1.0.11
- Squid-cache squid 3.1.0.12
- Squid-cache squid 3.1.0.13
- Squid-cache squid 3.1.0.14
- Squid-cache squid 3.1.0.15
- Squid-cache squid 3.1.0.16
- Squid-cache squid 3.1.0.17
- Squid-cache squid 3.1.0.18
- Squid-cache squid 3.1.0.2
- Squid-cache squid 3.1.0.3
- Squid-cache squid 3.1.0.4
- Squid-cache squid 3.1.0.5
- Squid-cache squid 3.1.0.6
- Squid-cache squid 3.1.0.7
- Squid-cache squid 3.1.0.8
- Squid-cache squid 3.1.0.9
- Squid-cache squid 3.1.1
- Squid-cache squid 3.1.10
- Squid-cache squid 3.1.11
- Squid-cache squid 3.1.12
- Squid-cache squid 3.1.12.1
- Squid-cache squid 3.1.12.2
- Squid-cache squid 3.1.12.3
- Squid-cache squid 3.1.13
- Squid-cache squid 3.1.14
- Squid-cache squid 3.1.15
- Squid-cache squid 3.1.16
- Squid-cache squid 3.1.17
- Squid-cache squid 3.1.18
- Squid-cache squid 3.1.19
- Squid-cache squid 3.1.2
- Squid-cache squid 3.1.20
- Squid-cache squid 3.1.21
- Squid-cache squid 3.1.22
- Squid-cache squid 3.1.3
- Squid-cache squid 3.1.4
- Squid-cache squid 3.1.5
- Squid-cache squid 3.1.5.1
- Squid-cache squid 3.1.6
- Squid-cache squid 3.1.7
- Squid-cache squid 3.1.8
- Squid-cache squid 3.1.9
- Squid-cache squid 3.2.0.1
- Squid-cache squid 3.2.0.10
- Squid-cache squid 3.2.0.11
- Squid-cache squid 3.2.0.12
- Squid-cache squid 3.2.0.13
- Squid-cache squid 3.2.0.14
- Squid-cache squid 3.2.0.15
- Squid-cache squid 3.2.0.16
- Squid-cache squid 3.2.0.17
- Squid-cache squid 3.2.0.18
- Squid-cache squid 3.2.0.19
- Squid-cache squid 3.2.0.2
- Squid-cache squid 3.2.0.3
- Squid-cache squid 3.2.0.4
- Squid-cache squid 3.2.0.5
- Squid-cache squid 3.2.0.6
- Squid-cache squid 3.2.0.7
- Squid-cache squid 3.2.0.8
- Squid-cache squid 3.2.0.9
- Squid-cache squid 3.2.1
- Squid-cache squid 3.2.10
- Squid-cache squid 3.2.11
- Squid-cache squid 3.2.12
- Squid-cache squid 3.2.13
- Squid-cache squid 3.2.2
- Squid-cache squid 3.2.3
- Squid-cache squid 3.2.4
- Squid-cache squid 3.2.5
- Squid-cache squid 3.2.6
- Squid-cache squid 3.2.7
- Squid-cache squid 3.2.8
- Squid-cache squid 3.2.9
- Squid-cache squid 3.3.0
- Squid-cache squid 3.3.0.1
- Squid-cache squid 3.3.0.2
- Squid-cache squid 3.3.0.3
- Squid-cache squid 3.3.1
- Squid-cache squid 3.3.10
- Squid-cache squid 3.3.11
- Squid-cache squid 3.3.12
- Squid-cache squid 3.3.13
- Squid-cache squid 3.3.14
- Squid-cache squid 3.3.2
- Squid-cache squid 3.3.3
- Squid-cache squid 3.3.4
- Squid-cache squid 3.3.5
- Squid-cache squid 3.3.6
- Squid-cache squid 3.3.7
- Squid-cache squid 3.3.8
- Squid-cache squid 3.3.9
- Squid-cache squid 3.4.0.1
- Squid-cache squid 3.4.0.2
- Squid-cache squid 3.4.0.3
- Squid-cache squid 3.4.1
- Squid-cache squid 3.4.10
- Squid-cache squid 3.4.11
- Squid-cache squid 3.4.12
- Squid-cache squid 3.4.13
- Squid-cache squid 3.4.14
- Squid-cache squid 3.4.2
- Squid-cache squid 3.4.3
- Squid-cache squid 3.4.4
- Squid-cache squid 3.4.4.1
- Squid-cache squid 3.4.4.2
- Squid-cache squid 3.4.8
- Squid-cache squid 3.4.9
- Squid-cache squid 3.5.0.1
- Squid-cache squid 3.5.0.2
- Squid-cache squid 3.5.0.3
- Squid-cache squid 3.5.0.4
- Squid-cache squid 3.5.1
- Squid-cache squid 3.5.10
- Squid-cache squid 3.5.11
- Squid-cache squid 3.5.12
- Squid-cache squid 3.5.13
- Squid-cache squid 3.5.14
- Squid-cache squid 3.5.15
- Squid-cache squid 3.5.16
- Squid-cache squid 3.5.2
- Squid-cache squid 3.5.3
- Squid-cache squid 3.5.4
- Squid-cache squid 3.5.5
- Squid-cache squid 3.5.6
- Squid-cache squid 3.5.7
- Squid-cache squid 3.5.8
- Squid-cache squid 3.5.9
- Squid-cache squid 4.0.1
- Squid-cache squid 4.0.2
- Squid-cache squid 4.0.3
- Squid-cache squid 4.0.4
- Squid-cache squid 4.0.5
- Squid-cache squid 4.0.6
- Squid-cache squid 4.0.7
- Squid-cache squid 4.0.8
References
- CVE: CVE-2016-4054