CVE-2016-4553、CVE-2016-4554、CVE-2016-4555、CVE-2016-4556 的安全性修正

----

CVE-2016-4051、CVE-2016-4052、CVE-2016-4053、CVE-2016-4054 的安全性修正

----

CVE-2016-3947 和 CVE-2016-3948 的安全性修正

----

CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572 的安全性修正

請注意，Tenable Network Security 已直接從 Fedora 更新系統網站擷取前置描述區塊。
Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

此 squid3 更新可修正下列問題：

- pinger ICMP 處理過程中的多個問題。
 (CVE-2014-7141、CVE-2014-7142)

- CVE-2016-3947：pinger ICMPv6 處理過程中存在緩衝區滿溢問題。(bsc#973782)

- CVE-2016-4554：修正 HTTP 要求處理過程中的標頭走私問題 (bsc#979010)

- 修正 HTTP 回應處理過程中的多個拒絕服務問題。(CVE-2016-2569、CVE-2016-2570、CVE-2016-2571、CVE-2016-2572、bsc#968392、bsc#968393、bsc#968394、bsc#968395)

- CVE-2016-3948：修正 HTTP 回應處理過程中的拒絕服務 (bsc#973783)

- CVE-2016-4051：已修正 cachemgr.cgi 中的緩衝區溢位 (bsc#976553)

- CVE-2016-4052、CVE-2016-4053、CVE-2016-4054：

- 修正 ESI 處理過程中的多個問題 (bsc#976556)

- CVE-2016-4556：修正 Esi.cc 中的重複釋放弱點 (bsc#979008)

- CVE-2015-5400：不當保護替代路徑 (bsc#938715)

- CVE-2014-6270：修正 snmp 子系統中的差一問題 (bsc#895773)

- 使用 external_acl 時 squid3 中發生的記憶體洩漏 (bsc#976708)

請注意，Tenable Network Security 已直接從 SUSE 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2600 advisory.

    - Resolves: #1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572       CVE-2016-3948 squid: various flaws
    - Related: #1334509 - CVE-2016-4553 squid: Cache poisoning issue in       HTTP Request handling
    - Related: #1334492 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556       squid: various flaws
    - Related: #1330577 - CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple       issues in ESI processing
    - Related: #1330577 - CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple       issues in ESI processing

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3557-1 advisory.

    Mathias Fischer discovered that Squid incorrectly handled certain long strings in headers. A malicious     remote server could possibly cause Squid to crash, resulting in a denial of service. This issue was only     addressed in Ubuntu 16.04 LTS. (CVE-2016-2569)

    William Lima discovered that Squid incorrectly handled XML parsing when processing Edge Side Includes     (ESI). A malicious remote server could possibly cause Squid to crash, resulting in a denial of service.
    This issue was only addressed in Ubuntu 16.04 LTS. (CVE-2016-2570)

    Alex Rousskov discovered that Squid incorrectly handled response-parsing failures. A malicious remote     server could possibly cause Squid to crash, resulting in a denial of service. This issue only applied to     Ubuntu 16.04 LTS. (CVE-2016-2571)

    Santiago Ruano Rincn discovered that Squid incorrectly handled certain Vary headers. A remote attacker     could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue was     only addressed in Ubuntu 16.04 LTS. (CVE-2016-3948)

    Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes (ESI) responses. A     malicious remote server could possibly cause Squid to crash, resulting in a denial of service.
    (CVE-2018-1000024)

    Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes (ESI) responses. A     malicious remote server could possibly cause Squid to crash, resulting in a denial of service.
    (CVE-2018-1000027)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201607-01 (Squid: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Squid. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker can possibly execute arbitrary code or create a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not     properly append data to String objects, which allows     remote servers to cause a denial of service (assertion     failure and daemon exit) via a long string, as     demonstrated by a crafted HTTP Vary     header.(CVE-2016-2569)

  - The Edge Side Includes (ESI) parser in Squid 3.x before     3.5.15 and 4.x before 4.0.7 does not check buffer     limits during XML parsing, which allows remote HTTP     servers to cause a denial of service (assertion failure     and daemon exit) via a crafted XML document, related to     esi/CustomParser.cc and     esi/CustomParser.h.(CVE-2016-2570)

  - http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7     proceeds with the storage of certain data after a     response-parsing failure, which allows remote HTTP     servers to cause a denial of service (assertion failure     and daemon exit) via a malformed     response.(CVE-2016-2571)

  - http.cc in Squid 4.x before 4.0.7 relies on the HTTP     status code after a response-parsing failure, which     allows remote HTTP servers to cause a denial of service     (assertion failure and daemon exit) via a malformed     response.(CVE-2016-2572)

  - Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly     perform bounds checking, which allows remote attackers     to cause a denial of service via a crafted HTTP     response, related to Vary headers.(CVE-2016-3948)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for squid3 fixes the following issues :

  - Multiple issues in pinger ICMP processing.
    (CVE-2014-7141, CVE-2014-7142)

  - CVE-2016-3947: Buffer overrun issue in pinger ICMPv6     processing. (bsc#973782)

  - CVE-2016-4554: fix header smuggling issue in HTTP     Request processing (bsc#979010)

  - Fix multiple Denial of Service issues in HTTP Response     processing. (CVE-2016-2569, CVE-2016-2570,     CVE-2016-2571, CVE-2016-2572, bsc#968392, bsc#968393,     bsc#968394, bsc#968395)

  - Regression caused by the DoS fixes above (bsc#993299)

  - CVE-2016-3948: Fix denial of service in HTTP Response     processing (bsc#973783)

  - CVE-2016-4051: fixes buffer overflow in cachemgr.cgi     (bsc#976553)

  - CVE-2016-4052, CVE-2016-4053, CVE-2016-4054 :

  - fixes multiple issues in ESI processing (bsc#976556)

  - CVE-2016-4556: fixes double free vulnerability in Esi.cc     (bsc#979008)

  - CVE-2015-5400: Improper Protection of Alternate Path     (bsc#938715)

  - CVE-2014-6270: fix off-by-one in snmp subsystem     (bsc#895773)

  - Memory leak in squid3 when using external_acl     (bsc#976708)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Versions of Squid 3.5.x prior to 3.5.15 are affected by multiple vulnerabilities :

 - A flaw is triggered when performing improper bounds checks on specially crafted HTTP responses. This may allow a remote attacker to cause a denial of service. 
 - A flaw is triggered as bounds are not properly checked when processing HTTP responses. This may allow a remote attacker to cause a denial of service for all clients accessing the service.
 - An overflow condition exists in the 'Icmp6::Recv()' function in 'icmp/Icmp6.cc' of the pinger binary. The issue is triggered as user-supplied input is not properly validated when handling specially crafted ICMPv6 packets. This may allow a remote attacker to cause a buffer overflow, crashing the pinger process or potentially leaking data into log files.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
92285	Fedora 23：7:squid (2016-b3b9407940)	Nessus	Fedora Local Security Checks	2016/7/15	2021/1/11	high
93271	SUSE SLES11 安全性更新：squid3 (SUSE-SU-2016:1996-1)	Nessus	SuSE Local Security Checks	2016/9/2	2021/1/19	high
94719	Oracle Linux 7 : squid (ELSA-2016-2600)	Nessus	Oracle Linux Local Security Checks	2016/11/11	2024/10/22	high
106619	Ubuntu 14.04 LTS / 16.04 LTS : Squid vulnerabilities (USN-3557-1)	Nessus	Ubuntu Local Security Checks	2018/2/6	2024/8/27	high
91982	GLSA-201607-01 : Squid: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/7/11	2021/1/11	high
99818	EulerOS 2.0 SP1 : squid (EulerOS-SA-2016-1056)	Nessus	Huawei Local Security Checks	2017/5/1	2021/1/6	high
93294	SUSE SLES11 Security Update : squid3 (SUSE-SU-2016:2089-1)	Nessus	SuSE Local Security Checks	2016/9/2	2021/1/19	high
9774	Squid 3.5.x < 3.5.15 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2016/11/11	2019/3/6	medium

检测

插件搜索

high

high

high

high

high

high

high

medium