{"id":"CVE-2016-4555","details":"client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.","modified":"2026-10-16T02:45:06.756725991Z","published":"2016-05-10T19:59:02.323Z","related":["SUSE-SU-2016:2008-1","SUSE-SU-2016:2089-1","openSUSE-SU-2024:11403-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"12.04"},{"last_affected":"12.04"},{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"15.10"},{"last_affected":"15.10"},{"introduced":"16.04"},{"last_affected":"16.04"}]}]},{"cpes":["cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"6"},{"last_affected":"6"},{"introduced":"7"},{"last_affected":"7"}]}],"vendor_product":"oracle:linux"},{"vendor_product":"squid-cache:squid","cpes":["cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"3.0"},{"last_affected":"3.0"},{"introduced":"3.3.0"},{"last_affected":"3.3.0"}]}]}]},"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"},{"type":"ADVISORY","url":"http://www.debian.org/security/2016/dsa-3625"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1035770"},{"type":"ADVISORY","url":"http://www.squid-cache.org/Advisories/SQUID-2016_9.txt"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-2995-1"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2016:1139"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2016:1140"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201607-01"},{"type":"FIX","url":"http://bugs.squid-cache.org/show_bug.cgi?id=4455"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2016/05/06/3"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2016/05/06/5"},{"type":"FIX","url":"http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_9.patch"},{"type":"FIX","url":"http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_9.patch"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/squid-cache/squid","events":[{"introduced":"f188960023551b2e9cb2a9df245b92bfeef37056"},{"last_affected":"15fb77e4092a910ea4abe83594a1ac9f79cae333"}],"database_specific":{"extracted_events":[{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1"},{"last_affected":"3.1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.1"},{"last_affected":"3.1.0.1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.2"},{"last_affected":"3.1.0.2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.3"},{"last_affected":"3.1.0.3"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.4"},{"last_affected":"3.1.0.4"}]},{"range":[{"introduced":"3.1.0.5"},{"last_affected":"3.1.0.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.0.6"},{"last_affected":"3.1.0.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.0.7"},{"last_affected":"3.1.0.7"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.0.8"},{"last_affected":"3.1.0.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.9"},{"last_affected":"3.1.0.9"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.0.10"},{"last_affected":"3.1.0.10"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.11"},{"last_affected":"3.1.0.11"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.12"},{"last_affected":"3.1.0.12"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.13"},{"last_affected":"3.1.0.13"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.0.14"},{"last_affected":"3.1.0.14"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.15"},{"last_affected":"3.1.0.15"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.16"},{"last_affected":"3.1.0.16"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.17"},{"last_affected":"3.1.0.17"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.18"},{"last_affected":"3.1.0.18"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.1"},{"last_affected":"3.1.1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*","range":[{"introduced":"3.1.2"},{"last_affected":"3.1.2"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.3"},{"last_affected":"3.1.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.4"},{"last_affected":"3.1.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.5"},{"last_affected":"3.1.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.5.1"},{"last_affected":"3.1.5.1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*","range":[{"introduced":"3.1.6"},{"last_affected":"3.1.6"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*","range":[{"introduced":"3.1.7"},{"last_affected":"3.1.7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*","range":[{"introduced":"3.1.8"},{"last_affected":"3.1.8"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*","range":[{"introduced":"3.1.9"},{"last_affected":"3.1.9"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*","range":[{"introduced":"3.1.10"},{"last_affected":"3.1.10"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*","range":[{"introduced":"3.1.11"},{"last_affected":"3.1.11"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12"},{"last_affected":"3.1.12"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.12.1"},{"last_affected":"3.1.12.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.12.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.12.2:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12.2"},{"last_affected":"3.1.12.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.12.3:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12.3"},{"last_affected":"3.1.12.3"}]},{"range":[{"introduced":"3.1.13"},{"last_affected":"3.1.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*","range":[{"introduced":"3.1.14"},{"last_affected":"3.1.14"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.15"},{"last_affected":"3.1.15"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.16"},{"last_affected":"3.1.16"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.16:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.17:*:*:*:*:*:*:*","range":[{"introduced":"3.1.17"},{"last_affected":"3.1.17"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.18:*:*:*:*:*:*:*","range":[{"introduced":"3.1.18"},{"last_affected":"3.1.18"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.19:*:*:*:*:*:*:*","range":[{"introduced":"3.1.19"},{"last_affected":"3.1.19"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.20:*:*:*:*:*:*:*","range":[{"introduced":"3.1.20"},{"last_affected":"3.1.20"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.21"},{"last_affected":"3.1.21"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.21:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*","range":[{"introduced":"3.1.22"},{"last_affected":"3.1.22"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.1"},{"last_affected":"3.2.0.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.2"},{"last_affected":"3.2.0.2"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.3"},{"last_affected":"3.2.0.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.4"},{"last_affected":"3.2.0.4"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.5"},{"last_affected":"3.2.0.5"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.6"},{"last_affected":"3.2.0.6"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.7"},{"last_affected":"3.2.0.7"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.8"},{"last_affected":"3.2.0.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.9"},{"last_affected":"3.2.0.9"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.10"},{"last_affected":"3.2.0.10"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.11"},{"last_affected":"3.2.0.11"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.12"},{"last_affected":"3.2.0.12"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.13"},{"last_affected":"3.2.0.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.14"},{"last_affected":"3.2.0.14"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.15"},{"last_affected":"3.2.0.15"}]},{"range":[{"introduced":"3.2.0.16"},{"last_affected":"3.2.0.16"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.17"},{"last_affected":"3.2.0.17"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.18"},{"last_affected":"3.2.0.18"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.19"},{"last_affected":"3.2.0.19"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*","range":[{"introduced":"3.2.1"},{"last_affected":"3.2.1"}]},{"range":[{"introduced":"3.2.2"},{"last_affected":"3.2.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*","range":[{"introduced":"3.2.3"},{"last_affected":"3.2.3"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*","range":[{"introduced":"3.2.4"},{"last_affected":"3.2.4"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.5:*:*:*:*:*:*:*","range":[{"introduced":"3.2.5"},{"last_affected":"3.2.5"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.6:*:*:*:*:*:*:*","range":[{"introduced":"3.2.6"},{"last_affected":"3.2.6"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.7:*:*:*:*:*:*:*","range":[{"introduced":"3.2.7"},{"last_affected":"3.2.7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.8:*:*:*:*:*:*:*","range":[{"introduced":"3.2.8"},{"last_affected":"3.2.8"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.9:*:*:*:*:*:*:*","range":[{"introduced":"3.2.9"},{"last_affected":"3.2.9"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.10:*:*:*:*:*:*:*","range":[{"introduced":"3.2.10"},{"last_affected":"3.2.10"}]},{"range":[{"introduced":"3.2.11"},{"last_affected":"3.2.11"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.11:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.12:*:*:*:*:*:*:*","range":[{"introduced":"3.2.12"},{"last_affected":"3.2.12"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.13:*:*:*:*:*:*:*","range":[{"introduced":"3.2.13"},{"last_affected":"3.2.13"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.3.0.1"},{"last_affected":"3.3.0.1"}]},{"range":[{"introduced":"3.3.0.2"},{"last_affected":"3.3.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.2:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.0.3"},{"last_affected":"3.3.0.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.3:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.1:*:*:*:*:*:*:*","range":[{"introduced":"3.3.1"},{"last_affected":"3.3.1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.2:*:*:*:*:*:*:*","range":[{"introduced":"3.3.2"},{"last_affected":"3.3.2"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.3.3"},{"last_affected":"3.3.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.3:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.4"},{"last_affected":"3.3.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.4:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.5"},{"last_affected":"3.3.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.5:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.6:*:*:*:*:*:*:*","range":[{"introduced":"3.3.6"},{"last_affected":"3.3.6"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*","range":[{"introduced":"3.3.7"},{"last_affected":"3.3.7"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.3.8"},{"last_affected":"3.3.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.8:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.9"},{"last_affected":"3.3.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.9:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.10"},{"last_affected":"3.3.10"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.10:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.11:*:*:*:*:*:*:*","range":[{"introduced":"3.3.11"},{"last_affected":"3.3.11"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.12:*:*:*:*:*:*:*","range":[{"introduced":"3.3.12"},{"last_affected":"3.3.12"}]},{"range":[{"introduced":"3.3.13"},{"last_affected":"3.3.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.13:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.14"},{"last_affected":"3.3.14"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.14:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.4.0.1"},{"last_affected":"3.4.0.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0.2"},{"last_affected":"3.4.0.2"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0.3"},{"last_affected":"3.4.0.3"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.1:*:*:*:*:*:*:*","range":[{"introduced":"3.4.1"},{"last_affected":"3.4.1"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.2:*:*:*:*:*:*:*","range":[{"introduced":"3.4.2"},{"last_affected":"3.4.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.3:*:*:*:*:*:*:*","range":[{"introduced":"3.4.3"},{"last_affected":"3.4.3"}]},{"range":[{"introduced":"3.4.4"},{"last_affected":"3.4.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.4:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.4.4.1"},{"last_affected":"3.4.4.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.4.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.4.2:*:*:*:*:*:*:*","range":[{"introduced":"3.4.4.2"},{"last_affected":"3.4.4.2"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.8:*:*:*:*:*:*:*","range":[{"introduced":"3.4.8"},{"last_affected":"3.4.8"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.4.9"},{"last_affected":"3.4.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.9:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.4.10"},{"last_affected":"3.4.10"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.10:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.11:*:*:*:*:*:*:*","range":[{"introduced":"3.4.11"},{"last_affected":"3.4.11"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.12:*:*:*:*:*:*:*","range":[{"introduced":"3.4.12"},{"last_affected":"3.4.12"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.13:*:*:*:*:*:*:*","range":[{"introduced":"3.4.13"},{"last_affected":"3.4.13"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.14:*:*:*:*:*:*:*","range":[{"introduced":"3.4.14"},{"last_affected":"3.4.14"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0.1"},{"last_affected":"3.5.0.1"}]},{"range":[{"introduced":"3.5.0.2"},{"last_affected":"3.5.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.2:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.5.0.3"},{"last_affected":"3.5.0.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.3:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.5.0.4"},{"last_affected":"3.5.0.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.4:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.1:*:*:*:*:*:*:*","range":[{"introduced":"3.5.1"},{"last_affected":"3.5.1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.2:*:*:*:*:*:*:*","range":[{"introduced":"3.5.2"},{"last_affected":"3.5.2"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.3:*:*:*:*:*:*:*","range":[{"introduced":"3.5.3"},{"last_affected":"3.5.3"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.4:*:*:*:*:*:*:*","range":[{"introduced":"3.5.4"},{"last_affected":"3.5.4"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.5:*:*:*:*:*:*:*","range":[{"introduced":"3.5.5"},{"last_affected":"3.5.5"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.6:*:*:*:*:*:*:*","range":[{"introduced":"3.5.6"},{"last_affected":"3.5.6"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.7:*:*:*:*:*:*:*","range":[{"introduced":"3.5.7"},{"last_affected":"3.5.7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.8:*:*:*:*:*:*:*","range":[{"introduced":"3.5.8"},{"last_affected":"3.5.8"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.9:*:*:*:*:*:*:*","range":[{"introduced":"3.5.9"},{"last_affected":"3.5.9"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.10:*:*:*:*:*:*:*","range":[{"introduced":"3.5.10"},{"last_affected":"3.5.10"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.11:*:*:*:*:*:*:*","range":[{"introduced":"3.5.11"},{"last_affected":"3.5.11"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.12:*:*:*:*:*:*:*","range":[{"introduced":"3.5.12"},{"last_affected":"3.5.12"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.13:*:*:*:*:*:*:*","range":[{"introduced":"3.5.13"},{"last_affected":"3.5.13"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.5.14"},{"last_affected":"3.5.14"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.14:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.15:*:*:*:*:*:*:*","range":[{"introduced":"3.5.15"},{"last_affected":"3.5.15"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.5.16"},{"last_affected":"3.5.16"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.16:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.17:*:*:*:*:*:*:*","range":[{"introduced":"3.5.17"},{"last_affected":"3.5.17"}]},{"range":[{"introduced":"4.0.1"},{"last_affected":"4.0.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*"},{"range":[{"introduced":"4.0.2"},{"last_affected":"4.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*"},{"range":[{"introduced":"4.0.3"},{"last_affected":"4.0.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*","range":[{"introduced":"4.0.4"},{"last_affected":"4.0.4"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*","range":[{"introduced":"4.0.5"},{"last_affected":"4.0.5"}]},{"range":[{"introduced":"4.0.6"},{"last_affected":"4.0.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.7:*:*:*:*:*:*:*","range":[{"introduced":"4.0.7"},{"last_affected":"4.0.7"}]},{"range":[{"introduced":"4.0.8"},{"last_affected":"4.0.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.8:*:*:*:*:*:*:*"},{"range":[{"introduced":"4.0.9"},{"last_affected":"4.0.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.9:*:*:*:*:*:*:*"}]}}],"versions":["3.1","3.1.0.1","3.1.0.10","3.1.0.11","3.1.0.12","3.1.0.13","3.1.0.14","3.1.0.15","3.1.0.16","3.1.0.17","3.1.0.18","3.1.0.2","3.1.0.3","3.1.0.4","3.1.0.5","3.1.0.6","3.1.0.7","3.1.0.8","3.1.0.9","3.1.1","3.1.10","3.1.11","3.1.12","3.1.12.1","3.1.12.2","3.1.12.3","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.5.1","3.1.6","3.1.7","3.1.8","3.1.9","3.2.0.1","3.2.0.10","3.2.0.11","3.2.0.12","3.2.0.13","3.2.0.14","3.2.0.15","3.2.0.16","3.2.0.17","3.2.0.18","3.2.0.19","3.2.0.2","3.2.0.3","3.2.0.4","3.2.0.5","3.2.0.6","3.2.0.7","3.2.0.8","3.2.0.9","3.2.1","3.2.10","3.2.11","3.2.12","3.2.13","3.2.2","3.2.3","3.2.4","3.2.5","3.2.6","3.2.7","3.2.8","3.2.9","3.3.0.1","3.3.0.2","3.3.0.3","3.3.1","3.3.10","3.3.11","3.3.12","3.3.13","3.3.14","3.3.2","3.3.3","3.3.4","3.3.5","3.3.6","3.3.7","3.3.8","3.3.9","3.4.0.1","3.4.0.2","3.4.0.3","3.4.1","3.4.10","3.4.11","3.4.12","3.4.13","3.4.14","3.4.2","3.4.3","3.4.4","3.4.4.1","3.4.4.2","3.4.8","3.4.9","3.5.0.1","3.5.0.2","3.5.0.3","3.5.0.4","3.5.1","3.5.10","3.5.11","3.5.12","3.5.13","3.5.14","3.5.15","3.5.16","3.5.17","3.5.2","3.5.3","3.5.4","3.5.5","3.5.6","3.5.7","3.5.8","3.5.9","4.0.1","4.0.2","4.0.3","4.0.4","4.0.5","4.0.6","4.0.7","4.0.8","4.0.9"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4555.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}