According to its banner, the version of Squid running on the remote host is 3.x prior to 3.5.18, or 4.x prior to 4.0.10. It is, therefore, affected by multiple denial of service (DoS) vulnerabilities in the ESI response processing component due to incorrect pointer handling and reference counting. A remote attacker controlled server can exploit this issue, via crafted ESI responses, to cause a denial of service for all clients accessing the Squid service.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The squid development team reports :

Please reference CVE/URL list for details

An update for squid is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es) :

* A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code. (CVE-2016-4051)

* Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/ HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack memory, or possibly execute arbitrary code as the user running Squid. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)

* An input validation flaw was found in the way Squid handled intercepted HTTP Request messages. An attacker could use this flaw to bypass the protection against issues related to CVE-2009-0801, and perform cache poisoning attacks on Squid. (CVE-2016-4553)

* An input validation flaw was found in Squid's mime_get_header_field() function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid operating as interception or reverse-proxy to contact the wrong origin server. It could also be used for cache poisoning for client not following RFC 7230. (CVE-2016-4554)

* A NULL pointer dereference flaw was found in the way Squid processes ESI responses. If Squid was used as a reverse proxy or for TLS/HTTPS interception, a malicious server could use this flaw to crash the Squid worker process. (CVE-2016-4555)

* An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack. (CVE-2016-4556)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2995-1 advisory.

    Yuriy M. Kaminskiy discovered that the Squid pinger utility incorrectly handled certain ICMPv6 packets. A     remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or     possibly cause Squid to leak information into log files. (CVE-2016-3947)

    Yuriy M. Kaminskiy discovered that the Squid cachemgr.cgi tool incorrectly handled certain crafted data. A     remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2016-4051)

    It was discovered that Squid incorrectly handled certain Edge Side Includes (ESI) responses. A remote     attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2016-4052, CVE-2016-4053, CVE-2016-4054)

    Jianjun Chen discovered that Squid did not correctly ignore the Host header when absolute-URI is provided.
    A remote attacker could possibly use this issue to conduct cache-poisoning attacks. This issue only     affected Ubuntu 14.04 LTS, Ubuntu 15.10 and Ubuntu 16.04 LTS. (CVE-2016-4553)

    Jianjun Chen discovered that Squid incorrectly handled certain HTTP Host headers. A remote attacker could     possibly use this issue to conduct cache-poisoning attacks. (CVE-2016-4554)

    It was discovered that Squid incorrectly handled certain Edge Side Includes (ESI) responses. A remote     attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service.
    (CVE-2016-4555, CVE-2016-4556)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201607-01 (Squid: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Squid. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker can possibly execute arbitrary code or create a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-464:02 advisory.

    Squid is a high-performance proxy caching server for Web clients,     supporting FTP, gopher, and HTTP data objects. Unlike traditional     caching software, Squid handles all requests in a single,     non-blocking, I/O-driven process. Squid keeps meta data and especially     hot objects cached in RAM, caches DNS lookups, supports non-blocking     DNS lookups, and implements negative caching of failed requests.
    Squid consists of a main server program squid, a Domain Name System     lookup program (dnsserver), a program for retrieving FTP data     (ftpget), and some management and client tools.
    Security issues fixed with this release:
    CVE-2016-4051     Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and     4.x before 4.0.9 might allow remote attackers to cause a denial of     service or execute arbitrary code by seeding manager reports with     crafted data.
    CVE-2016-4052     Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and     4.x before 4.0.9 allow remote HTTP servers to cause a denial of     service or execute arbitrary code via crafted Edge Side Includes (ESI)     responses.
    CVE-2016-4053     Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to     obtain sensitive stack layout information via crafted Edge Side     Includes (ESI) responses, related to incorrect use of assert and     compiler optimization.
    CVE-2016-4054     Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows     remote attackers to execute arbitrary code via crafted Edge Side     Includes (ESI) responses.
    CVE-2016-4554     mime_header.cc in Squid before 3.5.18 allows remote attackers to     bypass intended same-origin restrictions and possibly conduct     cache-poisoning attacks via a crated HTTP Host header, aka a header     smuggling issue.
    CVE-2016-4556     Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x     before 4.0.10 allows remote servers to cause a denial of service     (crash) via a crafted Edge Side Includes (ESI) response.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
119723	Squid 3.x < 3.5.18 / 4.x < 4.0.10 Multiple Denial of Service Vulnerabilities (SQUID-2016:9)	Nessus	Firewalls	2018/12/17	2024/7/15	high
90980	FreeBSD : squid -- multiple vulnerabilities (25e5205b-1447-11e6-9ead-6805ca0b3d42)	Nessus	FreeBSD Local Security Checks	2016/5/9	2021/1/4	high
91392	CentOS 7 : squid (CESA-2016:1139)	Nessus	CentOS Local Security Checks	2016/6/1	2021/1/4	high
91558	Ubuntu 14.04 LTS / 16.04 LTS : Squid vulnerabilities (USN-2995-1)	Nessus	Ubuntu Local Security Checks	2016/6/10	2025/9/3	high
91982	GLSA-201607-01 : Squid: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/7/11	2021/1/11	high
289641	MiracleLinux 4 : squid-3.1.23-16.AXS4.4 (AXSA:2016-464:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high

检测

插件搜索

high

high

high

high

high

high