Description

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.

Remediation

References

CVE-2016-4053

Related Vulnerabilities

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17822)

PHP Out-of-bounds Read Vulnerability (CVE-2019-9024)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25814)

Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-7903)

Payara URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-41699)

Severity

Low

Classification

CVE-2016-4053 CWE-119 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities