CVE-2016-10003

Description

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-1201

http://www.squid-cache.org/Advisories/SQUID-2016_10.txt

http://www.securitytracker.com/id/1037512

http://www.securityfocus.com/bid/94953

http://www.openwall.com/lists/oss-security/2016/12/18/1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS