Description

Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.

Remediation

References

CVE-2016-4052

Related Vulnerabilities

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2153)

WordPress Plugin Theme Blvd Layout Builder Multiple Security Bypass Vulnerabilities (2.0.1)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4341)

WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting (6.1.5)

Jenkins Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-2102)

Severity

High

Classification

CVE-2016-4052 CWE-119 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities