CVE-2016-3947

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers…

published April 7, 2016

CVSS
—
EPSS
15%
Percentile
96.6
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14620 · 96.6th percentile
Published
2016-04-07T18:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 15% → 31%
    epss
  • 06 SEP 03:09Z
    EPSS moved 15% → 31%
    epss
  • 30 AUG 15:32Z
    EPSS moved 31% → 15%
    epss
  • 29 AUG 04:11Z
    EPSS moved 15% → 31%
    epss
  • 07 APR 18:00Z
    Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers…
    cvelistv5