CVE-2016-10002

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.

• debian debian linux 8.0 • squid-cache squid 3.1.10 • squid-cache squid 3.1.11 • squid-cache squid 3.1.12 • squid-cache squid 3.1.14 • squid-cache squid 3.1.15 • squid-cache squid 3.1.16 • squid-cache squid 3.1.17 • squid-cache squid 3.1.18 • squid-cache squid 3.1.19 • squid-cache squid 3.1.20 • squid-cache squid 3.1.21 • squid-cache squid 3.1.22 • squid-cache squid 3.1.23 • squid-cache squid 3.2.0.3 • squid-cache squid 3.2.0.4 • squid-cache squid 3.2.0.5 • squid-cache squid 3.2.0.6 • squid-cache squid 3.2.0.7 • squid-cache squid 3.2.0.8 • squid-cache squid 3.2.0.9 • squid-cache squid 3.2.0.10 • squid-cache squid 3.2.0.11 • squid-cache squid 3.2.0.12 • squid-cache squid 3.2.0.13 • squid-cache squid 3.2.0.14 • squid-cache squid 3.2.0.15 • squid-cache squid 3.2.0.16 • squid-cache squid 3.2.0.17 • squid-cache squid 3.2.0.18 • squid-cache squid 3.2.0.19 • squid-cache squid 3.2.1 • squid-cache squid 3.2.2 • squid-cache squid 3.2.3 • squid-cache squid 3.2.4 • squid-cache squid 3.2.5 • squid-cache squid 3.2.6 • squid-cache squid 3.2.7 • squid-cache squid 3.2.8 • squid-cache squid 3.2.9 • squid-cache squid 3.2.10 • squid-cache squid 3.2.11 • squid-cache squid 3.2.12 • squid-cache squid 3.2.13 • squid-cache squid 3.2.14 • squid-cache squid 3.3.0.1 • squid-cache squid 3.3.0.2 • squid-cache squid 3.3.0.3 • squid-cache squid 3.3.1 • squid-cache squid 3.3.2 • squid-cache squid 3.3.3 • squid-cache squid 3.3.4 • squid-cache squid 3.3.5 • squid-cache squid 3.3.6 • squid-cache squid 3.3.7 • squid-cache squid 3.3.8 • squid-cache squid 3.3.9 • squid-cache squid 3.3.10 • squid-cache squid 3.3.11 • squid-cache squid 3.3.12 … and 62 more