← Back

CVE-2016-4556

nvd nist
Published: May 10, 2016Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.

Affected (148)

1 product
Squid
1 product
Linux
1 product
Ubuntu Linux
Configuration A
133 vulnerable
Vulnerable SoftwareAffected Versions
Squid Cache
Version 3.0
Version 3.1.0.10
Version 3.1.0.11
Version 3.1.0.12
Version 3.1.0.13
Version 3.1.0.14
Version 3.1.0.15
Version 3.1.0.16
Version 3.1.0.17
Version 3.1.0.18
Version 3.1.0.1
Version 3.1.0.2
Version 3.1.0.3
Version 3.1.0.4
Version 3.1.0.5
Version 3.1.0.6
Version 3.1.0.7
Version 3.1.0.8
Version 3.1.0.9
Version 3.1.10
Version 3.1.11
Version 3.1.12.1
Version 3.1.12.2
Version 3.1.12.3
Version 3.1.12
Version 3.1.13
Version 3.1.14
Version 3.1.15
Version 3.1.16
Version 3.1.17
Version 3.1.18
Version 3.1.19
Version 3.1.1
Version 3.1.20
Version 3.1.21
Version 3.1.22
Version 3.1.2
Version 3.1.3
Version 3.1.4
Version 3.1.5.1
Version 3.1.5
Version 3.1.6
Version 3.1.7
Version 3.1.8
Version 3.1.9
Version 3.1
Version 3.2.0.10
Version 3.2.0.11
Version 3.2.0.12
Version 3.2.0.13
Version 3.2.0.14
Version 3.2.0.15
Version 3.2.0.16
Version 3.2.0.17
Version 3.2.0.18
Version 3.2.0.19
Version 3.2.0.1
Version 3.2.0.2
Version 3.2.0.3
Version 3.2.0.4
Version 3.2.0.5
Version 3.2.0.6
Version 3.2.0.7
Version 3.2.0.8
Version 3.2.0.9
Version 3.2.10
Version 3.2.11
Version 3.2.12
Version 3.2.13
Version 3.2.1
Version 3.2.2
Version 3.2.3
Version 3.2.4
Version 3.2.5
Version 3.2.6
Version 3.2.7
Version 3.2.8
Version 3.2.9
Version 3.3.0.1
Version 3.3.0.2
Version 3.3.0.3
Version 3.3.0
Version 3.3.10
Version 3.3.11
Version 3.3.12
Version 3.3.13
Version 3.3.14
Version 3.3.1
Version 3.3.2
Version 3.3.3
Version 3.3.4
Version 3.3.5
Version 3.3.6
Version 3.3.7
Version 3.3.8
Version 3.3.9
Version 3.4.0.1
Version 3.4.0.2
Version 3.4.0.3
Version 3.4.10
Version 3.4.11
Version 3.4.12
Version 3.4.13
Version 3.4.14
Version 3.4.1
Version 3.4.2
Version 3.4.3
Version 3.4.4.1
Version 3.4.4.2
Version 3.4.4
Version 3.4.8
Version 3.4.9
Version 3.5.0.1
Version 3.5.0.2
Version 3.5.0.3
Version 3.5.0.4
Version 3.5.10
Version 3.5.11
Version 3.5.12
Version 3.5.13
Version 3.5.14
Version 3.5.15
Version 3.5.16
Version 3.5.17
Version 3.5.1
Version 3.5.2
Version 3.5.3
Version 3.5.4
Version 3.5.5
Version 3.5.6
Version 3.5.7
Version 3.5.8
Version 3.5.9
Configuration B
9 vulnerable
Vulnerable SoftwareAffected Versions
Squid Cache
Version 4.0.1
Version 4.0.2
Version 4.0.3
Version 4.0.4
Version 4.0.5
Version 4.0.6
Version 4.0.7
Version 4.0.8
Version 4.0.9
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 6
Version 7
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 12.04
Version 14.04
Version 15.10
Version 16.04

References (32)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Release NotesThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.