mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 09:41:05 +00:00
21 lines
878 B
Markdown
21 lines
878 B
Markdown
|
### [CVE-2016-4052](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4052)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
|
||
|
|
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
|
||
|
|
- http://www.securityfocus.com/bid/86788
|
||
|
|
- http://www.securityfocus.com/bid/91787
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
No PoCs found on GitHub currently.
|
||
|
|
|