CVE-2016-2569 PUBLISHED

Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.

EPSS 70.32% · 98.7th percentile

Risk Scores

EPSS Score
70.32%
98.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSsquid30, 3.3.8-1ubuntu16, 3.3.8-1ubuntu17

Timeline

References

Open in Interactive Console →