CVE-2016-10003

State: Published
Severity: Not scored
Published: Jan 27, 2017
Updated: Aug 6, 2024
Reserved: Dec 17, 2016

Description

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20161217 Re: CVE Request - squid HTTP proxy multiple Information Disclosure issuesmailing-list
1037512vdb-entry
94953vdb-entry
http://www.squid-cache.org/Advisories/SQUID-2016_10.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.