USN-2995-1: Squid vulnerabilities
USN-2995-1: Squid vulnerabilities Ubuntu Security Notice USN-2995-1 9th June, 2016 squid3 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Ubuntu 15.10 Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary Several security issues were fixed in Squid. Software description squid3 – Web proxy cache server Details Yuriy M. Kaminskiy discovered that the Squid pinger utility incorrectlyhandled certain ICMPv6 packets. A remote attacker could use this issue tocause Squid to crash, resulting in a denial of service, or possibly causeSquid to leak information into log files. (CVE-2016-3947) Yuriy M. Kaminskiy discovered that the Squid cachemgr.cgi tool incorrectlyhandled certain crafted data. A remote attacker could use this issue tocause Squid to crash, resulting in a denial of service, or possibly executearbitrary code. (CVE-2016-4051) It was discovered that Squid incorrectly handled certain Edge Side Includes(ESI) responses. A remote [ more… ]