Description

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.

Remediation

References

CVE-2016-4053

Related Vulnerabilities

WordPress Plugin Cooked-Recipe Cross-Site Scripting (1.7.9)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43818)

Undertow Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-3888)

WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1.3)

MongoDb CVE-2025-10061 Vulnerability (CVE-2025-10061)

Severity

Low

Classification

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-119 CVE-2016-4053