vulnerability
Amazon Linux AMI: CVE-2016-4053: Security patch for squid (ALAS-2016-713)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:P/I:N/A:N) | Apr 25, 2016 | Jun 15, 2016 | Mar 2, 2020 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Apr 25, 2016
Added
Jun 15, 2016
Modified
Mar 2, 2020
Description
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
Solution
amazon-linux-upgrade-squid
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.