NVD

Id
19687  
Name
CVE-2016-3947  
Description
Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-07  
Modified Date
2016-11-28  
Seq
2016-3947  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107847 19687 CVE-2016-3947 SUSE-SU-2016:1996  View
107848 19687 CVE-2016-3947 SUSE-SU-2016:2089  View
107849 19687 CVE-2016-3947 openSUSE-SU-2016:2081  View
107850 19687 CVE-2016-3947 1035457  View
107851 19687 CVE-2016-3947 http://www.squid-cache.org/Advisories/SQUID-2016_3.txt  View
107852 19687 CVE-2016-3947 http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10495.patch  View
107853 19687 CVE-2016-3947 http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11839.patch  View
107854 19687 CVE-2016-3947 http://www.squid-cache.org/Versions/v3/3.3/changesets/squid-3.3-12694.patch  View
107855 19687 CVE-2016-3947 http://www.squid-cache.org/Versions/v3/3.4/changesets/squid-3.4-13232.patch  View
107856 19687 CVE-2016-3947 http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14015.patch  View
107857 19687 CVE-2016-3947 USN-2995-1  View
107858 19687 CVE-2016-3947 GLSA-201607-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1203 JVNDB-2016-001976 Squid の pinger ユーティリティの icmp/Icmp6.cc 内の Icmp6::Recv 関数におけるヒープベースのバッファオーバーフローの脆弱性 Squid の pinger ユーティリティの icmp/Icmp6.cc 内の Icmp6::Recv 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-3947 90453 CVE-2016-3947 19687 7.5 8.2 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001976.html 2016-04-02 2016-07-01 View