CVEvulnerability

CVE-2016-10003

7.5 HIGH Published 2017-01-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-01-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-697

Description

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Affected configurations

• squid-cache squid (>= 3.5.0.1 < 3.5.23) • squid-cache squid (>= 4.0.1 < 4.0.17)

Related

Weakness · CWE (1)

  • CWE-697 Incorrect Comparison weakness

Referenced by CWE · observed example (1)

  • CWE-697 Incorrect Comparison weakness

References