CVE-2016-4553

Published: May 10, 2016Modified: May 6, 2026

8.6

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.

Affected (15)

Products: Canonical: Ubuntu Linux · Squid Cache: Squid · Oracle: Linux

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Squid Cache Squid	Up to 3.5.17

Configuration C

9 vulnerable

Vulnerable Software	Affected Versions
Squid Cache Squid	Version 4.0.1
Squid Cache Squid	Version 4.0.2
Squid Cache Squid	Version 4.0.3
Squid Cache Squid	Version 4.0.4
Squid Cache Squid	Version 4.0.5
Squid Cache Squid	Version 4.0.6
Squid Cache Squid	Version 4.0.7
Squid Cache Squid	Version 4.0.8
Squid Cache Squid	Version 4.0.9

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 7

Related CWEs

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (26)

http://bugs.squid-cache.org/show_bug.cgi?id=4501

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html

Source: cve@mitre.org

http://www.debian.org/security/2016/dsa-3625

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: cve@mitre.org

Third Party Advisory

http://www.securitytracker.com/id/1035768

Source: cve@mitre.org

Third Party Advisory

http://www.squid-cache.org/Advisories/SQUID-2016_7.txt

Source: cve@mitre.org

Vendor Advisory

http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2995-1

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1139

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2016:1140

Source: cve@mitre.org

https://security.gentoo.org/glsa/201607-01

Source: cve@mitre.org

http://bugs.squid-cache.org/show_bug.cgi?id=4501

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2016/dsa-3625

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securitytracker.com/id/1035768

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.squid-cache.org/Advisories/SQUID-2016_7.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2995-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1139

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2016:1140

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201607-01

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.