CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2017-01-27

Last modified

2024-08-06

Weaknesses

CWE-697

Affected products

• Squid (Squid-cache)

References

• http://www.openwall.com/lists/oss-security/2016/12/18/1
• http://www.securityfocus.com/bid/94953
• http://www.securitytracker.com/id/1037512
• http://www.squid-cache.org/Advisories/SQUID-2016_10.txt