{"id":"CVE-2016-4053","details":"Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.","modified":"2026-10-16T02:45:06.402442855Z","published":"2016-04-25T14:59:04.533Z","related":["SUSE-SU-2016:2008-1","SUSE-SU-2016:2089-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"],"extracted_events":[{"range":[{"introduced":"12.04"},{"last_affected":"12.04"},{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"15.10"},{"last_affected":"15.10"},{"introduced":"16.04"},{"last_affected":"16.04"}],"source":"CPE_STRING"}]},{"cpes":["cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"6"},{"last_affected":"6"},{"introduced":"7"},{"last_affected":"7"}],"source":"CPE_STRING"}],"vendor_product":"oracle:linux"},{"vendor_product":"squid-cache:squid","cpes":["cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"3.0"},{"last_affected":"3.0"},{"introduced":"3.3.0"},{"last_affected":"3.3.0"}],"source":"CPE_STRING"}]}]},"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"},{"type":"WEB","url":"http://www.securityfocus.com/bid/86788"},{"type":"ADVISORY","url":"http://www.debian.org/security/2016/dsa-3625"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/04/20/6"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/04/20/9"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/91787"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1035647"},{"type":"ADVISORY","url":"http://www.squid-cache.org/Advisories/SQUID-2016_6.txt"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-2995-1"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2016:1138"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2016:1139"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2016:1140"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201607-01"},{"type":"FIX","url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/squid-cache/squid","events":[{"introduced":"f188960023551b2e9cb2a9df245b92bfeef37056"},{"last_affected":"97f9388a0edced1b168f57afaa6fe54b135dccc9"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1"},{"last_affected":"3.1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.1"},{"last_affected":"3.1.0.1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.2"},{"last_affected":"3.1.0.2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.3"},{"last_affected":"3.1.0.3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.4"},{"last_affected":"3.1.0.4"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.5"},{"last_affected":"3.1.0.5"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.6"},{"last_affected":"3.1.0.6"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.7"},{"last_affected":"3.1.0.7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.8"},{"last_affected":"3.1.0.8"}]},{"range":[{"introduced":"3.1.0.9"},{"last_affected":"3.1.0.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.10"},{"last_affected":"3.1.0.10"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.11"},{"last_affected":"3.1.0.11"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.12"},{"last_affected":"3.1.0.12"}]},{"range":[{"introduced":"3.1.0.13"},{"last_affected":"3.1.0.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.14"},{"last_affected":"3.1.0.14"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.15"},{"last_affected":"3.1.0.15"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.16"},{"last_affected":"3.1.0.16"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.17"},{"last_affected":"3.1.0.17"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.18"},{"last_affected":"3.1.0.18"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.1"},{"last_affected":"3.1.1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*","range":[{"introduced":"3.1.2"},{"last_affected":"3.1.2"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.3"},{"last_affected":"3.1.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*","range":[{"introduced":"3.1.4"},{"last_affected":"3.1.4"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*","range":[{"introduced":"3.1.5"},{"last_affected":"3.1.5"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.5.1"},{"last_affected":"3.1.5.1"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.6"},{"last_affected":"3.1.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.7"},{"last_affected":"3.1.7"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.8"},{"last_affected":"3.1.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.9"},{"last_affected":"3.1.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*","range":[{"introduced":"3.1.10"},{"last_affected":"3.1.10"}]},{"range":[{"introduced":"3.1.11"},{"last_affected":"3.1.11"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12"},{"last_affected":"3.1.12"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.12.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12.1"},{"last_affected":"3.1.12.1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.12.2:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12.2"},{"last_affected":"3.1.12.2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.12.3:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12.3"},{"last_affected":"3.1.12.3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*","range":[{"introduced":"3.1.13"},{"last_affected":"3.1.13"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.14"},{"last_affected":"3.1.14"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.15"},{"last_affected":"3.1.15"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.16:*:*:*:*:*:*:*","range":[{"introduced":"3.1.16"},{"last_affected":"3.1.16"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.17:*:*:*:*:*:*:*","range":[{"introduced":"3.1.17"},{"last_affected":"3.1.17"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.18:*:*:*:*:*:*:*","range":[{"introduced":"3.1.18"},{"last_affected":"3.1.18"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.19:*:*:*:*:*:*:*","range":[{"introduced":"3.1.19"},{"last_affected":"3.1.19"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.20:*:*:*:*:*:*:*","range":[{"introduced":"3.1.20"},{"last_affected":"3.1.20"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.21:*:*:*:*:*:*:*","range":[{"introduced":"3.1.21"},{"last_affected":"3.1.21"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.22"},{"last_affected":"3.1.22"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.1"},{"last_affected":"3.2.0.1"}]},{"range":[{"introduced":"3.2.0.2"},{"last_affected":"3.2.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.3"},{"last_affected":"3.2.0.3"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.4"},{"last_affected":"3.2.0.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.0.5"},{"last_affected":"3.2.0.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.6"},{"last_affected":"3.2.0.6"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.7"},{"last_affected":"3.2.0.7"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.0.8"},{"last_affected":"3.2.0.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.9"},{"last_affected":"3.2.0.9"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.10"},{"last_affected":"3.2.0.10"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.11"},{"last_affected":"3.2.0.11"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.12"},{"last_affected":"3.2.0.12"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.13"},{"last_affected":"3.2.0.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.14"},{"last_affected":"3.2.0.14"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.15"},{"last_affected":"3.2.0.15"}]},{"range":[{"introduced":"3.2.0.16"},{"last_affected":"3.2.0.16"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.0.17"},{"last_affected":"3.2.0.17"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.18"},{"last_affected":"3.2.0.18"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.19"},{"last_affected":"3.2.0.19"}]},{"range":[{"introduced":"3.2.1"},{"last_affected":"3.2.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*","range":[{"introduced":"3.2.2"},{"last_affected":"3.2.2"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*","range":[{"introduced":"3.2.3"},{"last_affected":"3.2.3"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*","range":[{"introduced":"3.2.4"},{"last_affected":"3.2.4"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.5:*:*:*:*:*:*:*","range":[{"introduced":"3.2.5"},{"last_affected":"3.2.5"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.6:*:*:*:*:*:*:*","range":[{"introduced":"3.2.6"},{"last_affected":"3.2.6"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.7:*:*:*:*:*:*:*","range":[{"introduced":"3.2.7"},{"last_affected":"3.2.7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.8:*:*:*:*:*:*:*","range":[{"introduced":"3.2.8"},{"last_affected":"3.2.8"}]},{"range":[{"introduced":"3.2.9"},{"last_affected":"3.2.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.9:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.10:*:*:*:*:*:*:*","range":[{"introduced":"3.2.10"},{"last_affected":"3.2.10"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.11:*:*:*:*:*:*:*","range":[{"introduced":"3.2.11"},{"last_affected":"3.2.11"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.12:*:*:*:*:*:*:*","range":[{"introduced":"3.2.12"},{"last_affected":"3.2.12"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.13:*:*:*:*:*:*:*","range":[{"introduced":"3.2.13"},{"last_affected":"3.2.13"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.3.0.1"},{"last_affected":"3.3.0.1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.3.0.2"},{"last_affected":"3.3.0.2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.3.0.3"},{"last_affected":"3.3.0.3"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.3.1"},{"last_affected":"3.3.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.2:*:*:*:*:*:*:*","range":[{"introduced":"3.3.2"},{"last_affected":"3.3.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.3:*:*:*:*:*:*:*","range":[{"introduced":"3.3.3"},{"last_affected":"3.3.3"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.4:*:*:*:*:*:*:*","range":[{"introduced":"3.3.4"},{"last_affected":"3.3.4"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.3.5"},{"last_affected":"3.3.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.5:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.6"},{"last_affected":"3.3.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.6:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*","range":[{"introduced":"3.3.7"},{"last_affected":"3.3.7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.8:*:*:*:*:*:*:*","range":[{"introduced":"3.3.8"},{"last_affected":"3.3.8"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.9:*:*:*:*:*:*:*","range":[{"introduced":"3.3.9"},{"last_affected":"3.3.9"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.10:*:*:*:*:*:*:*","range":[{"introduced":"3.3.10"},{"last_affected":"3.3.10"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.11:*:*:*:*:*:*:*","range":[{"introduced":"3.3.11"},{"last_affected":"3.3.11"}]},{"range":[{"introduced":"3.3.12"},{"last_affected":"3.3.12"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.12:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.13"},{"last_affected":"3.3.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.13:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.14:*:*:*:*:*:*:*","range":[{"introduced":"3.3.14"},{"last_affected":"3.3.14"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0.1"},{"last_affected":"3.4.0.1"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0.2"},{"last_affected":"3.4.0.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0.3"},{"last_affected":"3.4.0.3"}]},{"range":[{"introduced":"3.4.1"},{"last_affected":"3.4.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.1:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.4.2"},{"last_affected":"3.4.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.2:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.4.3"},{"last_affected":"3.4.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.3:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.4.4"},{"last_affected":"3.4.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.4:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.4.1:*:*:*:*:*:*:*","range":[{"introduced":"3.4.4.1"},{"last_affected":"3.4.4.1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.4.2:*:*:*:*:*:*:*","range":[{"introduced":"3.4.4.2"},{"last_affected":"3.4.4.2"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.8:*:*:*:*:*:*:*","range":[{"introduced":"3.4.8"},{"last_affected":"3.4.8"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.9:*:*:*:*:*:*:*","range":[{"introduced":"3.4.9"},{"last_affected":"3.4.9"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.10:*:*:*:*:*:*:*","range":[{"introduced":"3.4.10"},{"last_affected":"3.4.10"}]},{"range":[{"introduced":"3.4.11"},{"last_affected":"3.4.11"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.11:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.12:*:*:*:*:*:*:*","range":[{"introduced":"3.4.12"},{"last_affected":"3.4.12"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.4.13"},{"last_affected":"3.4.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.13:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.14:*:*:*:*:*:*:*","range":[{"introduced":"3.4.14"},{"last_affected":"3.4.14"}]},{"range":[{"introduced":"3.5.0.1"},{"last_affected":"3.5.0.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0.2"},{"last_affected":"3.5.0.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0.3"},{"last_affected":"3.5.0.3"}]},{"range":[{"introduced":"3.5.0.4"},{"last_affected":"3.5.0.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.4:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.1:*:*:*:*:*:*:*","range":[{"introduced":"3.5.1"},{"last_affected":"3.5.1"}]},{"range":[{"introduced":"3.5.2"},{"last_affected":"3.5.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.2:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.3:*:*:*:*:*:*:*","range":[{"introduced":"3.5.3"},{"last_affected":"3.5.3"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.4:*:*:*:*:*:*:*","range":[{"introduced":"3.5.4"},{"last_affected":"3.5.4"}]},{"range":[{"introduced":"3.5.5"},{"last_affected":"3.5.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.5:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.6:*:*:*:*:*:*:*","range":[{"introduced":"3.5.6"},{"last_affected":"3.5.6"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.5.7"},{"last_affected":"3.5.7"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.7:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.5.8"},{"last_affected":"3.5.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.8:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.5.9"},{"last_affected":"3.5.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.9:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.10:*:*:*:*:*:*:*","range":[{"introduced":"3.5.10"},{"last_affected":"3.5.10"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.11:*:*:*:*:*:*:*","range":[{"introduced":"3.5.11"},{"last_affected":"3.5.11"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.12:*:*:*:*:*:*:*","range":[{"introduced":"3.5.12"},{"last_affected":"3.5.12"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.5.13"},{"last_affected":"3.5.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.13:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.14:*:*:*:*:*:*:*","range":[{"introduced":"3.5.14"},{"last_affected":"3.5.14"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.15:*:*:*:*:*:*:*","range":[{"introduced":"3.5.15"},{"last_affected":"3.5.15"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.16:*:*:*:*:*:*:*","range":[{"introduced":"3.5.16"},{"last_affected":"3.5.16"}],"source":"CPE_STRING"},{"range":[{"introduced":"4.0.1"},{"last_affected":"4.0.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*","range":[{"introduced":"4.0.2"},{"last_affected":"4.0.2"}],"source":"CPE_STRING"},{"range":[{"introduced":"4.0.3"},{"last_affected":"4.0.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*","range":[{"introduced":"4.0.4"},{"last_affected":"4.0.4"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*","range":[{"introduced":"4.0.5"},{"last_affected":"4.0.5"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*","range":[{"introduced":"4.0.6"},{"last_affected":"4.0.6"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*","range":[{"introduced":"4.0.7"},{"last_affected":"4.0.7"}]},{"range":[{"introduced":"4.0.8"},{"last_affected":"4.0.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*"}]}}],"versions":["3.1","3.1.0.1","3.1.0.10","3.1.0.11","3.1.0.12","3.1.0.13","3.1.0.14","3.1.0.15","3.1.0.16","3.1.0.17","3.1.0.18","3.1.0.2","3.1.0.3","3.1.0.4","3.1.0.5","3.1.0.6","3.1.0.7","3.1.0.8","3.1.0.9","3.1.1","3.1.10","3.1.11","3.1.12","3.1.12.1","3.1.12.2","3.1.12.3","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.5.1","3.1.6","3.1.7","3.1.8","3.1.9","3.2.0.1","3.2.0.10","3.2.0.11","3.2.0.12","3.2.0.13","3.2.0.14","3.2.0.15","3.2.0.16","3.2.0.17","3.2.0.18","3.2.0.19","3.2.0.2","3.2.0.3","3.2.0.4","3.2.0.5","3.2.0.6","3.2.0.7","3.2.0.8","3.2.0.9","3.2.1","3.2.10","3.2.11","3.2.12","3.2.13","3.2.2","3.2.3","3.2.4","3.2.5","3.2.6","3.2.7","3.2.8","3.2.9","3.3.0.1","3.3.0.2","3.3.0.3","3.3.1","3.3.10","3.3.11","3.3.12","3.3.13","3.3.14","3.3.2","3.3.3","3.3.4","3.3.5","3.3.6","3.3.7","3.3.8","3.3.9","3.4.0.1","3.4.0.2","3.4.0.3","3.4.1","3.4.10","3.4.11","3.4.12","3.4.13","3.4.14","3.4.2","3.4.3","3.4.4","3.4.4.1","3.4.4.2","3.4.8","3.4.9","3.5.0.1","3.5.0.2","3.5.0.3","3.5.0.4","3.5.1","3.5.10","3.5.11","3.5.12","3.5.13","3.5.14","3.5.15","3.5.16","3.5.2","3.5.3","3.5.4","3.5.5","3.5.6","3.5.7","3.5.8","3.5.9","4.0.1","4.0.2","4.0.3","4.0.4","4.0.5","4.0.6","4.0.7","4.0.8"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4053.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}