VDB
SUSE-SU-2016%3A2008-1
SUSE-SU-2016%3A2008-1
PUBLISHED
CVSS 7.5 HIGH
Security update for squid
Risk Scores
CVSS 3.1
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | ||
| squid | ||
| SUSE Linux Enterprise Server 12 SP1 |
Exploit Intelligence
- Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header. (github-poc-repo)
- Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header. (github-poc-repo)
- Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header. (github-poc)
- https://bugzilla.suse.com/979010 (circl)
- https://www.suse.com/security/cve/CVE-2015-3455/ (circl)
- https://bugzilla.suse.com/929493 (circl)
- https://bugzilla.suse.com/938715 (circl)
- https://bugzilla.suse.com/955783 (circl)
- https://bugzilla.suse.com/959290 (circl)
- https://bugzilla.suse.com/963539 (circl)
…and 31 more exploits
Timeline
- Aug 9, 2016 CVE Published
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2008-1.json advisory
- https://www.suse.com/support/update/announcement/2016/suse-su-20162008-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html advisory
- https://bugzilla.suse.com/902197 advisory
- https://bugzilla.suse.com/929493 advisory
- https://bugzilla.suse.com/938715 advisory
- https://bugzilla.suse.com/955783 advisory
- https://bugzilla.suse.com/959290 advisory
- https://bugzilla.suse.com/963539 advisory
- https://bugzilla.suse.com/968392 advisory
- https://bugzilla.suse.com/968393 advisory
- https://bugzilla.suse.com/968394 advisory
- https://bugzilla.suse.com/968395 advisory
- https://bugzilla.suse.com/973782 advisory
- https://bugzilla.suse.com/973783 advisory
- https://bugzilla.suse.com/976553 advisory
- https://bugzilla.suse.com/976556 advisory
- https://bugzilla.suse.com/979008 advisory
- https://bugzilla.suse.com/979009 advisory
…and 18 more