ISOMAN

CVE

CVE-2016-5408

Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux6.10 x86_64 server dvdunknownsource
Oracle Linux6.10 x86_64 server bootunknownsource
Oracle Linux6.10 x86_64 server uek-bootunknownsource
Oracle Linux6.10 source source-dvd1unknownsource
Oracle Linux6.10 source source-dvd2unknownsource
Oracle Linux6.9 x86_64 server dvdunknownsource
Oracle Linux6.9 x86_64 server bootunknownsource
Oracle Linux6.9 x86_64 server uek-bootunknownsource
Oracle Linux6.9 source source-dvd1unknownsource
Oracle Linux6.9 source source-dvd2unknownsource
Oracle Linux6.8 x86_64 server dvdunknownsource
Oracle Linux6.8 x86_64 server bootunknownsource
Oracle Linux6.8 x86_64 server uek-bootunknownsource
Oracle Linux6.8 source source-dvd1unknownsource
Oracle Linux6.8 source source-dvd2unknownsource

References

  1. http://rhn.redhat.com/errata/RHSA-2016-1573.html
  2. http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
  3. http://rhn.redhat.com/errata/RHSA-2016-1573.html
  4. http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html