CVE-2016-5408
Fixed in a distro release EPSS 4%
Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051.
Products: oracle linux, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | squid3 | 3.1.20-2.2+deb7u6 |
| Red Hat Enterprise Linux 6 | squid | 7:3.1.23-16.el6_8.6 |
| Red Hat Enterprise Linux 6 | squid-debuginfo | 7:3.1.23-16.el6_8.6 |