vulnerability

Ubuntu: (Multiple Advisories) (CVE-2016-2570): Squid vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published

Feb 27, 2016

Added

Feb 6, 2018

Modified

Mar 27, 2026

Description

The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.

Solution

ubuntu-upgrade-squid3

References

CVE-2016-2570
https://attackerkb.com/topics/CVE-2016-2570
CWE-20
EUVD-EUVD-2016-3644
NVD-CVE-2016-2570
UBUNTU-USN-3557-1
UBUNTU-USN-5771-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-3644

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report