CVE-2016-3948

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-3948
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-3948.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-3948
Downstream
Related
Published
2016-04-07T18:59:01.607Z
Modified
2025-11-14T04:44:00.252240Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.

References

Affected packages

Git / github.com/squid-cache/squid

Affected ranges

Type
GIT
Repo
https://github.com/squid-cache/squid
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
010a096fd7a7b777b0829b9451041bd29e1c9ab7
Last affected
02e08dff0bf10bec4a736c0c8ec55404d9d87d04
Last affected
0307c140c60e7ce68b14ee0dc841f99e92c462c4
Last affected
0320456309188a9afce413751566c775374f739b
Last affected
03b30ca2ccb07c86f90436cdf908aaa600a3d2d5
Last affected
04c6f6c989fb0083b3b10adfe2f438b6781c43bd
Last affected
0768c6a825a9d31674ed602705db47e44d1506d2
Last affected
082d319afdcea8063d66a4d62305a46f643e0ecf
Last affected
08bb741d3d3860c4cceaf8b975ae30a043c4cc0b
Last affected
0a86601658fe06bf7c2dd39dc742078b41100082
Last affected
0af063db08b7381f05da53b4e82ad114d1ed884f
Last affected
0c8347ccf393a39e2f2b932af5617383355a9205
Last affected
0e5319252a576a90c94b45ac6a7bdd714a1ad89d
Last affected
10b17d5ba656fa1d620fb1402080b65ca22e35f4
Last affected
1243ec712bf76c549ba7f48fcdc30d98ce550449
Last affected
1294bc0ba91589f22976aa613a9d187eb9a8b458
Last affected
146dff1641e1cafffc42f1e64585ef40279748ea
Last affected
161cd46e3cbec472e090d8c1bae28dee271c11c1
Last affected
16aeb23e632cbdb9fbacecf3e0810d15fa5be6ce
Last affected
1968c994fc58a4414ae9b7a749572637b570ed43
Last affected
1988de5bff40bc85b8d0d95298fc4715c19f2d56
Last affected
20635298cbb2c4174aef47bf28abca3fd41f29e9
Last affected
2379f8704e576bf973d6369db033f8c31ace79b9
Last affected
23d36dbdc71f7eb62bfa02ee64a57c1e1200ec20
Last affected
24c941823519e4a5fd50f847869633df59cb3c8a
Last affected
2552ca552397fb9d23f06d4f1211c505205aee95
Last affected
25becf82ca7fd514c1bf89e90507afec99b41f63
Last affected
296a5a06290b6f9eea36945c6c35c606a4302227
Last affected
2a255c860c579b7a25a2b537872e0dcce7983821
Last affected
2e56d9ec0224e36cfa30da316ed26e7dd0967d25
Last affected
2f6650dc3d4b16a34963212a0f412ad4f90c9dc7
Last affected
35fc2c85bf61d6e0b1466bcceaeb952f41f273f8
Last affected
360ef302a7a4f2a23b29105442c2bd94525ba862
Last affected
364504efcfb3e54d8f9cd5da2fda27141e19a52c
Last affected
3749964e79716534b3226d35e1f67072c5b11272
Last affected
3c8b5c1e8ee8b5b0dce5671331298add54884d45
Last affected
3d030ae4aeb4e0f6b68aea984587101b689f3e01
Last affected
3e26877ad7d95be6d03eafa6c649ac5719a9b7b8
Last affected
3eec572903c26cd1bdc5f81bdf4040d72cf3e8cb
Last affected
404063c59bb4ffa6c5a005611c4375f82ddd423f
Last affected
40fc2c6d9dbafc52852ab7752a3b70997513d09b
Last affected
43414554f57678ebae84ab3ede007a42fec099d2
Last affected
47b0a53c8c18b171262ebb7825be13dcc2a95b0e
Last affected
4bc04e53dfa4c3e88866a320282247ded45981b3
Last affected
51542de4b7ec5b9f615064d6ec1f2db8f5dc46eb
Last affected
531519b20df4d09be74eab8b1f28fcb8324e195c
Last affected
587ca2b7953baf346198c97eb8e4b5ae613c2054
Last affected
5a1755ec4d32e77df4a6df656ecd36c3cf9ce474
Last affected
5f8b1ebe2c1074e3bef1ad4b1acdeddacf8d3182
Last affected
6016af25b74da90a8fd112dc9c077986bcdae24b
Last affected
617f74d77bbfc48df25606ea1846929ed6a38677
Last affected
651b12950fdc2c2a71c1115eeabb6e9eaf7f5756
Last affected
66bd07b5f597756ab11c8747568f5dacf301886a
Last affected
67d28ab2063f8e60af7287bee0214c009f170670
Last affected
681f2679de484873d5f6a69a326c088b6161dcc0
Last affected
6965ac55b927a43f0d87ef9fa83b3b2348d940af
Last affected
69b6459b1fed89686d173367cb1088b230e857ab
Last affected
6a4ea9c96ddedea6b76ce4f0f58e19065a5ded39
Last affected
6a70bd5a2e51e8c5686b8d18a59ce285699d8a68
Last affected
6c4d7196d05c95c406bafce712c8768cc8dc3beb
Last affected
6cf3ab45966cec5eff37ee1cb7d073ba6ed41049
Last affected
6df20824764501aa044f228cf232ab9062f5b2e2
Last affected
6ec68eb9be41795e50f52f88236f5415db48193a
Last affected
733ce6a2620375881170aa52fe3474805f257580
Last affected
73b38343cdba296929ee47378e4f1b89df5549f3
Last affected
76249d3f79580a0fb63d3e91cf6826e297b87d6e
Last affected
7647f4f93651255bfcfb949fcee57cfc731df273
Last affected
78121f9a195344616290ecdd4f7f9dd521daaf1a
Last affected
78749a65bbba65cd9a8853cbb02bfe601eaec303
Last affected
7a6d23ae1fe70d8a7b7e69b4b8796c2b7178d038
Last affected
7ab566ae2ba925178dd0d11d7f54b419cc5649f5
Last affected
7b4d0c3d7446d4913510fd603fa93b8853eac2a0
Last affected
7f53f09fb9dc2d6ac4f49ceae514ad6488e2600e
Last affected
81c3a4de6b1a8259793a0dffb68a37f42e7758d4
Last affected
836d89d797525a355b611c32fdbde8a4bbe7bbeb
Last affected
83f1f03412750fdd98b5219ff5829cd4e319a1b3
Last affected
860929ba5167a98ceb59b754ac00fa02dcf72537
Last affected
8816ba52ddc4db01bb25713629a00d94a63bf817
Last affected
88afacefb6e9f0f142711a89695ce778bf246903
Last affected
8bf6e4c6084eb39bb8b7856c41096b67a9b738fb
Last affected
8c0b9db4ff4f717a4017dfe88e5aa7f28f1215a3
Last affected
8e52b29f21ff2386f81710f0d4b9f9be5d13888d
Last affected
8e97e5a6b3dd15d3bd821e45a8472b532c6e858f
Last affected
93ed92fdf38533d4c7924e2c6274b2aead04e0a5
Last affected
9c187598c553e0e8b267470a663e826ad9ea9e70
Last affected
9f3d27fcb040743317ee1103fdafa3b1dbbef666
Last affected
a4be9cebc528a8a0c3be80207dc8a1e4dca22b68
Last affected
ae554264dd1549228e1975381ebef202c90b3a57
Last affected
af550ae944efbe50221fa9080d0eb17b724a743e
Last affected
afab0d62db7bdab084b051a604dc553063c32d79
Last affected
b59f0c8802d10b86bffea3aaaa5ae135c087b179
Last affected
b5db4387396a49e5c40e69fd1b75ff099c920bc9
Last affected
b76510325f9d9f91e6f08e93c52e2ad9b276ec05
Last affected
b7a7e8e9b9c745c7b04760a83d4574269c575771
Last affected
ba3f001ccb3459f706b9df20bd57aef8b034c9b5
Last affected
ba687e7081c71dd75fd6d634ec428fa7a95d8e00
Last affected
bb64fbe2f0dbdd58cbd8c19125317e3f9a894812
Last affected
bc74102edffac5fd83c99ba8517d21bb12d4ee8b
Last affected
bd495cabb0f4ba8013d61151abe70739cda37de1
Last affected
bf3b112b28b5789f045d8e018c4760d310e4793c
Last affected
c20c2ba08c67583be94cabce0088689b17d73993
Last affected
c4500670f0bd4a81a7f7326e3649045c94d81b88
Last affected
c4ecbb30535dbec6286394d57eeb344d29f0ec9b
Last affected
c596634373845267cbe8eeede838da063a280de4
Last affected
c77f389a5f9592bd75db8c38f892f20ffa2ce7d4
Last affected
c99c18e5227b44fab04116594eef2d27f500304e
Last affected
c9e6a7b0267a3e584887e844a8abecc256bc3ae7
Last affected
cb33b0332ac8c6758a13283e0b36d519b346edda
Last affected
cb560aedeb583a00794273bc10d5f7d1e5ce81fa
Last affected
cdd2b85d95b47a2da7142d20523c8559c28b6eb6
Last affected
cf73f53b2dec9ad09a5ec0bb9c56693a405c5422
Last affected
d0c5f7632ab816ad9074dfce4839398b1bfd507f
Last affected
d2edfc21f126191c4ba7904f9b1ca9bcf242420f
Last affected
d407a9994916d494e0e2866ec640f5804dd45ab0
Last affected
d44bfdad9b76753c27deaa3e9902aec465505e02
Last affected
d66163d55648b4be88a8b6be0714a96db21d09ca
Last affected
d6943a41c4c80e344a1b45ffca016cbdb6b459de
Last affected
d69a09280f949ccbde09bbd3323e705dde93c780
Last affected
d7e67b50092901662a2e7c8243d3dd92360c339f
Last affected
d8b36481486f766d92273aff673ad4c96b309a15
Last affected
d9055a3f5e12d42efd85a94e0cf40fbde24a1747
Last affected
d99a9e47ba552b46a7ee25bec81a81925ccf7707
Last affected
dad5203230fbbbd55ace819d3860be74eac2c04b
Last affected
dcd00840fc81f8f3dbff4deb1285561a5ee83632
Last affected
ddda851ccffdc6ef7f880bf4efdf269596f17c5e
Last affected
e1a069368123cdb1bcc4a741810e659e47e74087
Last affected
e31215b3334957cd1b5ed7f2d149e02218d9ff51
Last affected
ea532ad2c107f5e7c411cf50da2398528f7d8197
Last affected
eb029f8b5ed4df5f533f71576d966c7f87bdd627
Last affected
ed419f2eeb6fa1993633e87444e37ff05b0678e5
Last affected
ed4ee52aa6f17203eccbf06fb42bed6113739831
Last affected
f156a03afa4fa390164a68fc4f8cabf8aa1ce327
Last affected
f188960023551b2e9cb2a9df245b92bfeef37056
Last affected
f1d764835fcbeefdd3c20d29f187d0d14f3ed6b3
Last affected
f3ed5e9ed6e060862ba73b7c1991b94bed7330f5
Last affected
f5430fb355860dc9405a97919e534777819dea31
Last affected
f5a5b5a1899c6b45035bc3cb72f6967ec6c61363
Last affected
f70ddc104739d2abe80d9cd80e4365737b90731b
Last affected
f8c5f533ae65a6798c629cf4f3fe84002710a21f
Last affected
f8fd344c591b9d6de2b44d9693be47c6b7989116
Last affected
fa511ad17a593a064e660728d7b5af1805e751c3
Last affected
faa83934a89a6a708cd823b69b3bee4fc59847f4
Last affected
fb6ff7ef8fab0384a16878b826fd7eb0f92a8203
Last affected
fbb42e9343bb46531abda92f0f8502d8d634bdfa
Last affected
fe18eb28a0f32d879d0b99d26a1b97c54ee993eb
Last affected
ff57826cea2f97c47cee95241adc7193f96b089d
Last affected
ff59ac0fba145467c8e362418e5f8ecd7c5a1770
Last affected
ff87fda5fe2e205785b15ebdb243ad812effc981

Affected versions

Other

BASIC_TPROXY4
HISTORIC_RELEASES
SQUID_3_0_PRE1
SQUID_3_0_PRE2
SQUID_3_0_PRE3
SQUID_3_0_PRE4
SQUID_3_0_PRE5
SQUID_3_0_PRE6
SQUID_3_0_PRE7
SQUID_3_0_RC1
SQUID_3_0_STABLE1
SQUID_3_0_STABLE10
SQUID_3_0_STABLE11
SQUID_3_0_STABLE11_RC1
SQUID_3_0_STABLE12
SQUID_3_0_STABLE13
SQUID_3_0_STABLE14
SQUID_3_0_STABLE15
SQUID_3_0_STABLE16
SQUID_3_0_STABLE16_RC1
SQUID_3_0_STABLE17
SQUID_3_0_STABLE18
SQUID_3_0_STABLE19
SQUID_3_0_STABLE2
SQUID_3_0_STABLE20
SQUID_3_0_STABLE21
SQUID_3_0_STABLE3
SQUID_3_0_STABLE4
SQUID_3_0_STABLE5
SQUID_3_0_STABLE6
SQUID_3_0_STABLE7
SQUID_3_0_STABLE8
SQUID_3_0_STABLE9
SQUID_3_1_0_1
SQUID_3_1_0_10
SQUID_3_1_0_11
SQUID_3_1_0_12
SQUID_3_1_0_13
SQUID_3_1_0_14
SQUID_3_1_0_2
SQUID_3_1_0_3
SQUID_3_1_0_4
SQUID_3_1_0_5
SQUID_3_1_0_6
SQUID_3_1_0_7
SQUID_3_1_0_8
SQUID_3_1_0_9
SQUID_3_2_0_1
SQUID_3_3_0_1
SQUID_3_3_0_2
SQUID_3_3_0_3
SQUID_3_3_1
SQUID_3_3_2
SQUID_3_3_3
SQUID_3_3_4
SQUID_3_4_0_1
SQUID_3_4_0_2
SQUID_3_4_0_3
SQUID_3_4_1
SQUID_3_4_2
SQUID_3_4_3
SQUID_3_4_4
SQUID_3_5_0_1
SQUID_3_5_0_2
SQUID_3_5_0_3
SQUID_3_5_0_4
SQUID_3_5_1
SQUID_3_5_2
SQUID_3_5_3
SQUID_3_5_4
SQUID_3_5_5
SQUID_3_5_6
SQUID_3_5_7
SQUID_4_0_1
for-libecap-v0p1
merge-candidate-3-v1
merge-candidate-3-v2
sourceformat-review-1
take00
take01
take02
take03
take04
take06
take07
take08
take09
take1
take2

BumpSslServerFirst.*

BumpSslServerFirst.take01
BumpSslServerFirst.take02
BumpSslServerFirst.take03
BumpSslServerFirst.take04
BumpSslServerFirst.take05
BumpSslServerFirst.take06
BumpSslServerFirst.take07
BumpSslServerFirst.take08
BumpSslServerFirst.take09
BumpSslServerFirst.take10

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-3948.json"