CVE-2016-10003 | BDVDB-2026-80753 Detail

Description#

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2016/12/18/1
http://www.securitytracker.com/id/1037512
http://www.securityfocus.com/bid/94953
http://www.squid-cache.org/Advisories/SQUID-2016_10.txt

Exploit#

No public exploit known

History#

Version 12017-01-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.