{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-06T00:00:00", "descriptions": [{"lang": "en", "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-11-28T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "GLSA-201607-01", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201607-01"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"}, {"name": "SUSE-SU-2016:1996", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"}, {"name": "USN-2995-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/USN-2995-1"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"}, {"name": "RHSA-2016:1140", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2016:1140"}, {"name": "openSUSE-SU-2016:2081", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"}, {"name": "RHSA-2016:1139", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2016:1139"}, {"name": "SUSE-SU-2016:2089", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"}, {"name": "1035768", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1035768"}, {"name": "DSA-3625", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2016/dsa-3625"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2016-4553", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "GLSA-201607-01", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201607-01"}, {"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"name": "http://bugs.squid-cache.org/show_bug.cgi?id=4501", "refsource": "CONFIRM", "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"}, {"name": "SUSE-SU-2016:1996", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"}, {"name": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt", "refsource": "CONFIRM", "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"}, {"name": "USN-2995-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-2995-1"}, {"name": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch", "refsource": "CONFIRM", "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"}, {"name": "RHSA-2016:1140", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2016:1140"}, {"name": "openSUSE-SU-2016:2081", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"}, {"name": "RHSA-2016:1139", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2016:1139"}, {"name": "SUSE-SU-2016:2089", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"}, {"name": "1035768", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1035768"}, {"name": "DSA-3625", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2016/dsa-3625"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T00:32:25.689Z"}, "title": "CVE Program Container", "references": [{"name": "GLSA-201607-01", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201607-01"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"}, {"name": "SUSE-SU-2016:1996", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"}, {"name": "USN-2995-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-2995-1"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"}, {"name": "RHSA-2016:1140", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2016:1140"}, {"name": "openSUSE-SU-2016:2081", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"}, {"name": "RHSA-2016:1139", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2016:1139"}, {"name": "SUSE-SU-2016:2089", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"}, {"name": "1035768", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1035768"}, {"name": "DSA-3625", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2016/dsa-3625"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2016-4553", "datePublished": "2016-05-10T19:00:00", "dateReserved": "2016-05-06T00:00:00", "dateUpdated": "2024-08-06T00:32:25.689Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", "matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "matchCriteriaId": "C563F5CC-F4FB-4440-981E-EA2C003A639C", "versionEndIncluding": "3.5.17", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "060FCBEA-DEAA-42FB-88C9-4B78136B172F", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "74987102-8CA8-4120-B686-F18579A96A46", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "DA7828AA-48B6-44CD-8507-345A4F0A25BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "6640F25F-CC8B-4B05-A97A-2186BD0B5ED8", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "A037F780-6FC9-4130-908F-B5434FA0C7DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "1DDEB455-F082-44E4-8CEA-019C0084BF05", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "49555803-288E-4B0A-B12A-890E5E0AD05F", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "EBEE374C-365E-49DE-A9F9-6083044C774D", "vulnerable": true}, {"criteria": "cpe:2.3:a:squid-cache:squid:4.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "1B6B2A8E-DD81-43CD-9F5B-E8F87498E513", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*", "matchCriteriaId": "104DA87B-DEE4-4262-AE50-8E6BC43B228B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request."}, {"lang": "es", "value": "client_side.cc en Squid en versiones anteriores a 3.5.18 y 4.x en versiones anteriores a 4.0.10 no ignora correctamente la cabecera Host cuando se proporciona una URI absoluta, lo que permite a atacantes remotos llevar a cabo ataques de envenenamiento de cach\u00e9 a trav\u00e9s de una petici\u00f3n HTTP."}], "id": "CVE-2016-4553", "lastModified": "2024-11-21T02:52:27.950", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "[email protected]", "type": "Primary"}]}, "published": "2016-05-10T19:59:00.137", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"}, {"source": "[email protected]", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"}, {"source": "[email protected]", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"}, {"source": "[email protected]", "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"}, {"source": "[email protected]", "url": "http://www.debian.org/security/2016/dsa-3625"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.securitytracker.com/id/1035768"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"}, {"source": "[email protected]", "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-2995-1"}, {"source": "[email protected]", "url": "https://access.redhat.com/errata/RHSA-2016:1139"}, {"source": "[email protected]", "url": "https://access.redhat.com/errata/RHSA-2016:1140"}, {"source": "[email protected]", "url": "https://security.gentoo.org/glsa/201607-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://bugs.squid-cache.org/show_bug.cgi?id=4501"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2016/dsa-3625"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.securitytracker.com/id/1035768"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.squid-cache.org/Advisories/SQUID-2016_7.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-2995-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHSA-2016:1139"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://access.redhat.com/errata/RHSA-2016:1140"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/201607-01"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-345"}], "source": "[email protected]", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2016:1140", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "squid34-7:3.4.14-9.el6_8.3", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2016-05-31T00:00:00Z"}, {"advisory": "RHSA-2016:1139", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "squid-7:3.3.8-26.el7_2.3", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2016-05-31T00:00:00Z"}], "bugzilla": {"description": "squid: Cache poisoning issue in HTTP Request handling", "id": "1334233", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334233"}, "csaw": false, "cvss": {"cvss_base_score": "4.3", "cvss_scoring_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "status": "verified"}, "cwe": "CWE-20", "details": ["client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.", "An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid."], "name": "CVE-2016-4553", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "package_name": "squid", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "squid", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2016-05-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2016-4553\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-4553\nhttp://www.squid-cache.org/Advisories/SQUID-2016_7.txt"], "threat_severity": "Moderate", "upstream_fix": "squid 3.5.18"}