client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2016-05-10 12:59
Updated : 2019-12-27 08:08
NVD link : CVE-2016-4555
Mitre link : CVE-2016-4555
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
canonical
- ubuntu_linux
oracle
- linux
squid-cache
- squid