VULNERABILITY INTELLIGENCE

CVE-2016-10003

CVSS score7.5 HIGH

EPSS probability4.77%

CISA KEVNot currently listed

Published2017-01-27

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Weakness classification

CWE-697: Incorrect Comparison

Primary references

cve@mitre.org — Mailing List, Patch, Third Party Advisory
cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory