CVE-2016-3947 PUBLISHED

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.

EPSS 75.37% · 98.9th percentile

Risk Scores

EPSS Score
75.37%
98.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSsquid33.3.8-1ubuntu16, 3.3.8-1ubuntu17, 3.5.12-1ubuntu7
Ubuntu:14.04:LTSsquid33.3.8-1ubuntu6.1, 3.3.8-1ubuntu6.3, 0

Timeline

References

Open in Interactive Console →