squid: denial of service
| Package(s): | squid | CVE #(s): | CVE-2016-2570 | ||||||||||||||||||||||||||||||||||||
| Created: | March 7, 2016 | Updated: | November 11, 2016 | ||||||||||||||||||||||||||||||||||||
| Description: | From the CVE entry:
The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h. | ||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||