Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-5408

Fixed in a distro release EPSS 4%

Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051.

Published 2016-08-10 · CVE record · OSV

Products: oracle linux, redhat enterprise_linux_server, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Debian 7squid33.1.20-2.2+deb7u6
Red Hat Enterprise Linux 6squid7:3.1.23-16.el6_8.6
Red Hat Enterprise Linux 6squid-debuginfo7:3.1.23-16.el6_8.6