CVE-2016-10003

Description

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

References

http://www.squid-cache.org/Advisories/SQUID-2016_10.txt

http://www.openwall.com/lists/oss-security/2016/12/18/1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3