Vulnerability-Lookup

CVE-2016-4553 (GCVE-0-2016-4553)

Vulnerability from cvelistv5 – Published: 2016-05-10 19:00 – Updated: 2024-08-06 00:32

Summary

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.

Severity

8.6 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2334 records in the last 180 days details

References

13 references

URL	Tags
https://security.gentoo.org/glsa/201607-01	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://bugs.squid-cache.org/show_bug.cgi?id=4501	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.squid-cache.org/Advisories/SQUID-2016_7.txt	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2995-1	vendor-advisoryx_refsource_UBUNTU
http://www.squid-cache.org/Versions/v3/3.5/change…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2016:1140	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2016:1139	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1035768	vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2016/dsa-3625	vendor-advisoryx_refsource_DEBIAN

Date Public

2016-05-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:32:25.689Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201607-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
          },
          {
            "name": "SUSE-SU-2016:1996",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
          },
          {
            "name": "USN-2995-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2995-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
          },
          {
            "name": "RHSA-2016:1140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1140"
          },
          {
            "name": "openSUSE-SU-2016:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
          },
          {
            "name": "RHSA-2016:1139",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1139"
          },
          {
            "name": "SUSE-SU-2016:2089",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
          },
          {
            "name": "1035768",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035768"
          },
          {
            "name": "DSA-3625",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3625"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201607-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
        },
        {
          "name": "SUSE-SU-2016:1996",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
        },
        {
          "name": "USN-2995-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2995-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
        },
        {
          "name": "RHSA-2016:1140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1140"
        },
        {
          "name": "openSUSE-SU-2016:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
        },
        {
          "name": "RHSA-2016:1139",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1139"
        },
        {
          "name": "SUSE-SU-2016:2089",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
        },
        {
          "name": "1035768",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035768"
        },
        {
          "name": "DSA-3625",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3625"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-4553",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201607-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201607-01"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "http://bugs.squid-cache.org/show_bug.cgi?id=4501",
              "refsource": "CONFIRM",
              "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
            },
            {
              "name": "SUSE-SU-2016:1996",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
            },
            {
              "name": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt",
              "refsource": "CONFIRM",
              "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
            },
            {
              "name": "USN-2995-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2995-1"
            },
            {
              "name": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch",
              "refsource": "CONFIRM",
              "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
            },
            {
              "name": "RHSA-2016:1140",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1140"
            },
            {
              "name": "openSUSE-SU-2016:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
            },
            {
              "name": "RHSA-2016:1139",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1139"
            },
            {
              "name": "SUSE-SU-2016:2089",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
            },
            {
              "name": "1035768",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035768"
            },
            {
              "name": "DSA-3625",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3625"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-4553",
    "datePublished": "2016-05-10T19:00:00.000Z",
    "dateReserved": "2016-05-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:32:25.689Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2016-4553",
      "date": "2026-10-21",
      "epss": "0.79969",
      "percentile": "0.99614"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                    "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                    "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                    "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C563F5CC-F4FB-4440-981E-EA2C003A639C",
                    "versionEndIncluding": "3.5.17",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "060FCBEA-DEAA-42FB-88C9-4B78136B172F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "74987102-8CA8-4120-B686-F18579A96A46",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DA7828AA-48B6-44CD-8507-345A4F0A25BC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6640F25F-CC8B-4B05-A97A-2186BD0B5ED8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A037F780-6FC9-4130-908F-B5434FA0C7DE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1DDEB455-F082-44E4-8CEA-019C0084BF05",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "49555803-288E-4B0A-B12A-890E5E0AD05F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EBEE374C-365E-49DE-A9F9-6083044C774D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:squid-cache:squid:4.0.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1B6B2A8E-DD81-43CD-9F5B-E8F87498E513",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "104DA87B-DEE4-4262-AE50-8E6BC43B228B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."
          },
          {
            "lang": "es",
            "value": "client_side.cc en Squid en versiones anteriores a 3.5.18 y 4.x en versiones anteriores a 4.0.10 no ignora correctamente la cabecera Host cuando se proporciona una URI absoluta, lo que permite a atacantes remotos llevar a cabo ataques de envenenamiento de cach\u00e9 a trav\u00e9s de una petici\u00f3n HTTP."
          }
        ],
        "id": "CVE-2016-4553",
        "lastModified": "2026-05-06T22:30:45.220",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
                "version": "3.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 4.0,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2016-05-10T19:59:00.137",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2016/dsa-3625"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.securitytracker.com/id/1035768"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2995-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2016:1139"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://access.redhat.com/errata/RHSA-2016:1140"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://security.gentoo.org/glsa/201607-01"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2016/dsa-3625"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.securitytracker.com/id/1035768"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2995-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2016:1139"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://access.redhat.com/errata/RHSA-2016:1140"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://security.gentoo.org/glsa/201607-01"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-345"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T12:05:13+00:00",
      "cve": "CVE-2016-4553",
      "id": "CVE-2016-4553",
      "initial_release_date": "2016-05-06T00:00:00+00:00",
      "product_status:fixed": "70",
      "product_status:known_not_affected": "3",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "squid: Cache poisoning issue in HTTP Request handling",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-4553.json",
      "version": "3"
    }
  }
}

CERTFR-2016-AVI-157

Vulnerability from certfr_avis - Published: 2016-05-09 - Updated: 2016-05-09

De multiples vulnérabilités ont été corrigées dans Squid. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Squid	Squid	Squid versions antérieures à 3.5.18
	Squid	Squid	Squid versions 4.x antérieures à 4.0.10

References

Title

Publication Time

CNVD-2016-03062

Vulnerability from cnvd - Published: 2016-05-13

Title

Squid代码注入漏洞

Description

Squid（全称Squid Cache）是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。 Squid 3.5.18之前版本和4.0.10之前4.x版本中的client_side.cc文件存在代码注入漏洞，该漏洞源于当用户提供absolute-URI时，程序未能正确忽略Host头。远程攻击者可通过提供HTTP请求利用该漏洞实施缓存中毒攻击。

Severity

中

Patch Name

Squid代码注入漏洞的补丁

Patch Description

Formal description

用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞： http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch

Reference

http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch

Impacted products

Name
['Squid Squid 4.x<4.0.10', 'Squid Squid <3.5.18']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-4553"
    }
  },
  "description": "Squid\uff08\u5168\u79f0Squid Cache\uff09\u662f\u4e00\u5957\u4ee3\u7406\u670d\u52a1\u5668\u548cWeb\u7f13\u5b58\u670d\u52a1\u5668\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u7f13\u5b58\u4e07\u7ef4\u7f51\u3001\u8fc7\u6ee4\u6d41\u91cf\u3001\u4ee3\u7406\u4e0a\u7f51\u7b49\u529f\u80fd\u3002\r\n\r\nSquid 3.5.18\u4e4b\u524d\u7248\u672c\u548c4.0.10\u4e4b\u524d4.x\u7248\u672c\u4e2d\u7684client_side.cc\u6587\u4ef6\u5b58\u5728\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5f53\u7528\u6237\u63d0\u4f9babsolute-URI\u65f6\uff0c\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u5ffd\u7565Host\u5934\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u63d0\u4f9bHTTP\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u7f13\u5b58\u4e2d\u6bd2\u653b\u51fb\u3002",
  "discovererName": "Jianjun Chen from Tsinghua University",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-03062",
  "openTime": "2016-05-13",
  "patchDescription": "Squid\uff08\u5168\u79f0Squid Cache\uff09\u662f\u4e00\u5957\u4ee3\u7406\u670d\u52a1\u5668\u548cWeb\u7f13\u5b58\u670d\u52a1\u5668\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u7f13\u5b58\u4e07\u7ef4\u7f51\u3001\u8fc7\u6ee4\u6d41\u91cf\u3001\u4ee3\u7406\u4e0a\u7f51\u7b49\u529f\u80fd\u3002\r\n\r\nSquid 3.5.18\u4e4b\u524d\u7248\u672c\u548c4.0.10\u4e4b\u524d4.x\u7248\u672c\u4e2d\u7684client_side.cc\u6587\u4ef6\u5b58\u5728\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5f53\u7528\u6237\u63d0\u4f9babsolute-URI\u65f6\uff0c\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u5ffd\u7565Host\u5934\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u63d0\u4f9bHTTP\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u7f13\u5b58\u4e2d\u6bd2\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Squid\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Squid Squid 4.x\u003c4.0.10",
      "Squid Squid \u003c3.5.18"
    ]
  },
  "referenceLink": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch",
  "serverity": "\u4e2d",
  "submitTime": "2016-05-12",
  "title": "Squid\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e"
}

FKIE_CVE-2016-4553

Vulnerability from fkie_nvd - Published: 2016-05-10 19:59 - Updated: 2026-06-17 00:47

Severity

8.6 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Summary

References

URL	Tags
cve@mitre.org	http://bugs.squid-cache.org/show_bug.cgi?id=4501	Vendor Advisory
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
cve@mitre.org	http://www.debian.org/security/2016/dsa-3625
cve@mitre.org	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	Third Party Advisory
cve@mitre.org	http://www.securitytracker.com/id/1035768	Third Party Advisory
cve@mitre.org	http://www.squid-cache.org/Advisories/SQUID-2016_7.txt	Vendor Advisory
cve@mitre.org	http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch
cve@mitre.org	http://www.ubuntu.com/usn/USN-2995-1	Third Party Advisory
cve@mitre.org	https://access.redhat.com/errata/RHSA-2016:1139
cve@mitre.org	https://access.redhat.com/errata/RHSA-2016:1140
cve@mitre.org	https://security.gentoo.org/glsa/201607-01
af854a3a-2127-422b-91ae-364da2661108	http://bugs.squid-cache.org/show_bug.cgi?id=4501	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2016/dsa-3625
af854a3a-2127-422b-91ae-364da2661108	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1035768	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.squid-cache.org/Advisories/SQUID-2016_7.txt	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2995-1	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2016:1139
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2016:1140
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201607-01

Impacted products

Vendor	Product	Version
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	15.10
canonical	ubuntu_linux	16.04
squid-cache	squid	*
squid-cache	squid	4.0.1
squid-cache	squid	4.0.2
squid-cache	squid	4.0.3
squid-cache	squid	4.0.4
squid-cache	squid	4.0.5
squid-cache	squid	4.0.6
squid-cache	squid	4.0.7
squid-cache	squid	4.0.8
squid-cache	squid	4.0.9
oracle	linux	7

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C563F5CC-F4FB-4440-981E-EA2C003A639C",
              "versionEndIncluding": "3.5.17",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "060FCBEA-DEAA-42FB-88C9-4B78136B172F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "74987102-8CA8-4120-B686-F18579A96A46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA7828AA-48B6-44CD-8507-345A4F0A25BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6640F25F-CC8B-4B05-A97A-2186BD0B5ED8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A037F780-6FC9-4130-908F-B5434FA0C7DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DDEB455-F082-44E4-8CEA-019C0084BF05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "49555803-288E-4B0A-B12A-890E5E0AD05F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBEE374C-365E-49DE-A9F9-6083044C774D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid-cache:squid:4.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B6B2A8E-DD81-43CD-9F5B-E8F87498E513",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*",
              "matchCriteriaId": "104DA87B-DEE4-4262-AE50-8E6BC43B228B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."
    },
    {
      "lang": "es",
      "value": "client_side.cc en Squid en versiones anteriores a 3.5.18 y 4.x en versiones anteriores a 4.0.10 no ignora correctamente la cabecera Host cuando se proporciona una URI absoluta, lo que permite a atacantes remotos llevar a cabo ataques de envenenamiento de cach\u00e9 a trav\u00e9s de una petici\u00f3n HTTP."
    }
  ],
  "id": "CVE-2016-4553",
  "lastModified": "2026-06-17T00:47:46.123",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 8.6,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-05-10T19:59:00.137",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2016/dsa-3625"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.securitytracker.com/id/1035768"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2995-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2016:1139"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2016:1140"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://security.gentoo.org/glsa/201607-01"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2016/dsa-3625"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.securitytracker.com/id/1035768"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2995-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2016:1139"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2016:1140"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.gentoo.org/glsa/201607-01"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-345"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-P6VJ-J24G-56WP

Vulnerability from github – Published: 2022-05-13 01:29 – Updated: 2022-05-13 01:29

Details

Severity

8.6 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2016-4553"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-345"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2016-05-10T19:59:00Z",
    "severity": "HIGH"
  },
  "details": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.",
  "id": "GHSA-p6vj-j24g-56wp",
  "modified": "2022-05-13T01:29:26Z",
  "published": "2022-05-13T01:29:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4553"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2016:1139"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2016:1140"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201607-01"
    },
    {
      "type": "WEB",
      "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2016/dsa-3625"
    },
    {
      "type": "WEB",
      "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1035768"
    },
    {
      "type": "WEB",
      "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
    },
    {
      "type": "WEB",
      "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2995-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2016-4553

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2016-4553

Aliases

CVE-2016-4553

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2016-4553",
    "description": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.",
    "id": "GSD-2016-4553",
    "references": [
      "https://www.suse.com/security/cve/CVE-2016-4553.html",
      "https://www.debian.org/security/2016/dsa-3625",
      "https://access.redhat.com/errata/RHSA-2016:1140",
      "https://access.redhat.com/errata/RHSA-2016:1139",
      "https://ubuntu.com/security/CVE-2016-4553",
      "https://advisories.mageia.org/CVE-2016-4553.html",
      "https://linux.oracle.com/cve/CVE-2016-4553.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2016-4553"
      ],
      "details": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.",
      "id": "GSD-2016-4553",
      "modified": "2023-12-13T01:21:18.742941Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2016-4553",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "GLSA-201607-01",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201607-01"
          },
          {
            "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            "refsource": "CONFIRM",
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "http://bugs.squid-cache.org/show_bug.cgi?id=4501",
            "refsource": "CONFIRM",
            "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
          },
          {
            "name": "SUSE-SU-2016:1996",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
          },
          {
            "name": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt",
            "refsource": "CONFIRM",
            "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
          },
          {
            "name": "USN-2995-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2995-1"
          },
          {
            "name": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch",
            "refsource": "CONFIRM",
            "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
          },
          {
            "name": "RHSA-2016:1140",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2016:1140"
          },
          {
            "name": "openSUSE-SU-2016:2081",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
          },
          {
            "name": "RHSA-2016:1139",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2016:1139"
          },
          {
            "name": "SUSE-SU-2016:2089",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
          },
          {
            "name": "1035768",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1035768"
          },
          {
            "name": "DSA-3625",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2016/dsa-3625"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.5.17",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-4553"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-345"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1035768",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.securitytracker.com/id/1035768"
            },
            {
              "name": "http://bugs.squid-cache.org/show_bug.cgi?id=4501",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"
            },
            {
              "name": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"
            },
            {
              "name": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"
            },
            {
              "name": "USN-2995-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-2995-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "GLSA-201607-01",
              "refsource": "GENTOO",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/201607-01"
            },
            {
              "name": "SUSE-SU-2016:2089",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"
            },
            {
              "name": "SUSE-SU-2016:1996",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"
            },
            {
              "name": "openSUSE-SU-2016:2081",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"
            },
            {
              "name": "DSA-3625",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2016/dsa-3625"
            },
            {
              "name": "RHSA-2016:1140",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2016:1140"
            },
            {
              "name": "RHSA-2016:1139",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2016:1139"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 4.0
        }
      },
      "lastModifiedDate": "2019-12-27T16:08Z",
      "publishedDate": "2016-05-10T19:59Z"
    }
  }
}

OPENSUSE-SU-2024:11403-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:17

Summary

squid-4.16-1.5 on GA media

Severity

Moderate

Scope

40 vulnerabilities in this advisory, including CVE-2016-4553.

CVE-2016-4553

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Recommended: 4 products

Open the full advisory

RHSA-2016:1139

Vulnerability from csaf_opensuse - Published: 2016-05-31 00:00 - Updated: 2026-09-20 10:56

Summary

security update for squid

Severity

Moderate

Scope

8 vulnerabilities in this advisory, including CVE-2016-4553.

CVE-2016-4553

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Recommended: 2 products

Open the full advisory

RHSA-2016:1140

Vulnerability from csaf_redhat - Published: 2016-05-31 05:56 - Updated: 2026-06-25 10:46

Summary

Red Hat Security Advisory: squid34 security update

Severity

Moderate

Scope

8 vulnerabilities in this advisory, including CVE-2016-4553.

CVE-2016-4553

An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Fixed: 14 products

https://access.redhat.com/errata/RHSA-2016:1140

Open the full advisory

SUSE-SU-2016:2008-1

Vulnerability from csaf_suse - Published: 2016-08-09 11:32 - Updated: 2026-09-20 12:15

Summary

Security update for squid

Severity

Moderate

Scope

16 vulnerabilities in this advisory, including CVE-2016-4553.

CVE-2016-4553

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Recommended: 9 products

Open the full advisory

SUSE-SU-2016:2089-1

Vulnerability from csaf_suse - Published: 2016-08-16 12:56 - Updated: 2026-09-20 12:16

Summary

Security update for squid3

Severity

Important

Scope

25 vulnerabilities in this advisory, including CVE-2016-4553.

CVE-2016-4553

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Recommended: 10 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2016-4553 (GCVE-0-2016-4553)

Solution

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour