NVD

Id
20670  
Name
CVE-2016-5408  
Description
Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-10  
Modified Date
2016-09-28  
Seq
2016-5408  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
113164 20670 CVE-2016-5408 RHSA-2016:1573  View
113165 20670 CVE-2016-5408 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3624 JVNDB-2016-004397 Red Hat Enterprise Linux の squid パッケージの cachemgr.cgi の munge_other_line 関数におけるスタックベースのバッファオーバーフローの脆弱性 Red Hat Enterprise Linux の squid パッケージの cachemgr.cgi の munge_other_line 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-5408 91914 CVE-2016-5408 20670 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004397.html 2016-08-04 2016-08-19 View