Approved changes feed: RSS · Atom

cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*

part: a version: 4.0.7 update: *

VendorSquid Cache (6232e3cf-8e18-5926-847d-3307ccebc4bf)
ProductSquid (9866eca5-f34c-5ae0-9aa7-b68baf8057cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/squid purl2cpe 2026-06-01 10:14:53.481511
pkg:deb/ubuntu/squid purl2cpe 2026-06-01 10:14:53.481512
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:14:53.481514
pkg:rpm/fedora/squid purl2cpe 2026-06-01 10:14:53.481515
pkg:rpm/opensuse/squid purl2cpe 2026-06-01 10:14:53.481517

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4556 vulnerable 2026-06-08 05:07:54.919243 Details available
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
Published: 2016-05-10T19:00:00.000Z
Updated: 2024-08-06T00:32:25.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4555 vulnerable 2026-06-08 05:07:54.914573 Details available
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
Published: 2016-05-10T19:00:00.000Z
Updated: 2024-08-06T00:32:25.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4553 vulnerable 2026-06-08 05:07:54.819570 Details available
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
Published: 2016-05-10T19:00:00.000Z
Updated: 2024-08-06T00:32:25.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4054 vulnerable 2026-06-08 05:07:46.559672 Details available
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4053 vulnerable 2026-06-08 05:07:46.555815 Details available
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
Published: 2016-04-25T14:00:00.000Z
Updated: 2024-08-06T00:17:30.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4052 vulnerable 2026-06-08 05:07:46.552096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4051 vulnerable 2026-06-08 05:07:46.547184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3948 vulnerable 2026-06-08 05:07:46.243917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3947 vulnerable 2026-06-08 05:07:46.219758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10002 vulnerable 2026-06-08 05:07:17.008940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.