CVE-2016-3947
07.04.2016, 18:59
Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.Enginsight
| Vendor | Product | Version |
|---|---|---|
| squid-cache | squid | 𝑥 ≤ 3.5.15 |
| squid-cache | squid | 4.0.1 |
| squid-cache | squid | 4.0.2 |
| squid-cache | squid | 4.0.3 |
| squid-cache | squid | 4.0.4 |
| squid-cache | squid | 4.0.5 |
| squid-cache | squid | 4.0.6 |
| squid-cache | squid | 4.0.7 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 15.10 |
| canonical | ubuntu_linux | 16.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References