{"id":"CVE-2016-2571","details":"http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.","modified":"2026-10-24T10:30:24.571739392Z","published":"2016-02-27T05:59:05.797Z","related":["SUSE-SU-2016:2008-1","SUSE-SU-2016:2089-1","openSUSE-SU-2024:11403-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:-:pre1:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:-:pre2:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:-:pre3:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:-:pre4:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:-:pre5:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:-:pre6:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:-:pre7:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.0:rc4:*:*:*:*:*:*","cpe:2.3:a:squid-cache:squid:3.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"3.0"},{"last_affected":"3.0"},{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"},{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"},{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"},{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"},{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"},{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"},{"introduced":"3.0-NA"},{"last_affected":"3.0-NA"},{"introduced":"3.0-rc4"},{"last_affected":"3.0-rc4"},{"introduced":"3.3.0"},{"last_affected":"3.3.0"}]}],"vendor_product":"squid-cache:squid"}]},"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2016/02/26/2"},{"type":"WEB","url":"http://www.securitytracker.com/id/1035101"},{"type":"WEB","url":"http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-13990.patch"},{"type":"WEB","url":"http://www.squid-cache.org/Versions/v4/changesets/squid-4-14548.patch"},{"type":"WEB","url":"https://usn.ubuntu.com/3557-1/"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2016-2600.html"},{"type":"ADVISORY","url":"http://www.debian.org/security/2016/dsa-3522"},{"type":"ADVISORY","url":"http://www.squid-cache.org/Advisories/SQUID-2016_2.txt"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-2921-1"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201607-01"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/squid-cache/squid","events":[{"introduced":"0320456309188a9afce413751566c775374f739b"},{"last_affected":"404063c59bb4ffa6c5a005611c4375f82ddd423f"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"3.0.stable1"},{"last_affected":"3.0.stable1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable1:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable2:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable2"},{"last_affected":"3.0.stable2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable3:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable3"},{"last_affected":"3.0.stable3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable4:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable4"},{"last_affected":"3.0.stable4"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable5:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable5"},{"last_affected":"3.0.stable5"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable6:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable6"},{"last_affected":"3.0.stable6"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable7:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable7"},{"last_affected":"3.0.stable7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable8:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable8"},{"last_affected":"3.0.stable8"}]},{"range":[{"introduced":"3.0.stable9"},{"last_affected":"3.0.stable9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable9:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable10:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable10"},{"last_affected":"3.0.stable10"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable11:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable11"},{"last_affected":"3.0.stable11"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable11:rc1:*:*:*:*:*:*","range":[{"introduced":"3.0.stable11-rc1"},{"last_affected":"3.0.stable11-rc1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable12:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable12"},{"last_affected":"3.0.stable12"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable13:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable13"},{"last_affected":"3.0.stable13"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.0.stable14"},{"last_affected":"3.0.stable14"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable14:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.0.stable15"},{"last_affected":"3.0.stable15"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable15:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable16:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable16"},{"last_affected":"3.0.stable16"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable16:rc1:*:*:*:*:*:*","range":[{"introduced":"3.0.stable16-rc1"},{"last_affected":"3.0.stable16-rc1"}]},{"range":[{"introduced":"3.0.stable17"},{"last_affected":"3.0.stable17"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable17:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable18:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable18"},{"last_affected":"3.0.stable18"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable19:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable19"},{"last_affected":"3.0.stable19"}]},{"range":[{"introduced":"3.0.stable20"},{"last_affected":"3.0.stable20"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable20:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable21:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable21"},{"last_affected":"3.0.stable21"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable22:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable22"},{"last_affected":"3.0.stable22"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable23:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable23"},{"last_affected":"3.0.stable23"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable24:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable24"},{"last_affected":"3.0.stable24"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.0.stable25:*:*:*:*:*:*:*","range":[{"introduced":"3.0.stable25"},{"last_affected":"3.0.stable25"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1"},{"last_affected":"3.1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.1"},{"last_affected":"3.1.0.1"}]},{"range":[{"introduced":"3.1.0.2"},{"last_affected":"3.1.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.3"},{"last_affected":"3.1.0.3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.4"},{"last_affected":"3.1.0.4"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.0.5"},{"last_affected":"3.1.0.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.6"},{"last_affected":"3.1.0.6"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.7"},{"last_affected":"3.1.0.7"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.8"},{"last_affected":"3.1.0.8"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.9"},{"last_affected":"3.1.0.9"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.10"},{"last_affected":"3.1.0.10"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.0.11"},{"last_affected":"3.1.0.11"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.12"},{"last_affected":"3.1.0.12"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.13"},{"last_affected":"3.1.0.13"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.14"},{"last_affected":"3.1.0.14"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.0.15"},{"last_affected":"3.1.0.15"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.16"},{"last_affected":"3.1.0.16"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.17"},{"last_affected":"3.1.0.17"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0.18"},{"last_affected":"3.1.0.18"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.1"},{"last_affected":"3.1.1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*","range":[{"introduced":"3.1.2"},{"last_affected":"3.1.2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*","range":[{"introduced":"3.1.3"},{"last_affected":"3.1.3"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.1.4"},{"last_affected":"3.1.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.5"},{"last_affected":"3.1.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*","range":[{"introduced":"3.1.5.1"},{"last_affected":"3.1.5.1"}]},{"range":[{"introduced":"3.1.6"},{"last_affected":"3.1.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.7"},{"last_affected":"3.1.7"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*","range":[{"introduced":"3.1.8"},{"last_affected":"3.1.8"}]},{"range":[{"introduced":"3.1.9"},{"last_affected":"3.1.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.10"},{"last_affected":"3.1.10"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.1.11"},{"last_affected":"3.1.11"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*","range":[{"introduced":"3.1.12"},{"last_affected":"3.1.12"}]},{"range":[{"introduced":"3.1.13"},{"last_affected":"3.1.13"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*","range":[{"introduced":"3.1.14"},{"last_affected":"3.1.14"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*","range":[{"introduced":"3.1.15"},{"last_affected":"3.1.15"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.1"},{"last_affected":"3.2.0.1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.2"},{"last_affected":"3.2.0.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.3"},{"last_affected":"3.2.0.3"}]},{"range":[{"introduced":"3.2.0.4"},{"last_affected":"3.2.0.4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.5"},{"last_affected":"3.2.0.5"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.6"},{"last_affected":"3.2.0.6"}]},{"range":[{"introduced":"3.2.0.7"},{"last_affected":"3.2.0.7"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.8"},{"last_affected":"3.2.0.8"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.0.9"},{"last_affected":"3.2.0.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.0.10"},{"last_affected":"3.2.0.10"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.0.11"},{"last_affected":"3.2.0.11"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.12"},{"last_affected":"3.2.0.12"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.13"},{"last_affected":"3.2.0.13"}]},{"range":[{"introduced":"3.2.0.14"},{"last_affected":"3.2.0.14"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.0.15"},{"last_affected":"3.2.0.15"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.0.16"},{"last_affected":"3.2.0.16"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.17"},{"last_affected":"3.2.0.17"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.18"},{"last_affected":"3.2.0.18"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*","range":[{"introduced":"3.2.0.19"},{"last_affected":"3.2.0.19"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*","range":[{"introduced":"3.2.1"},{"last_affected":"3.2.1"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.2.2"},{"last_affected":"3.2.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.3"},{"last_affected":"3.2.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*","range":[{"introduced":"3.2.4"},{"last_affected":"3.2.4"}]},{"range":[{"introduced":"3.2.5"},{"last_affected":"3.2.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.5:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.2.6"},{"last_affected":"3.2.6"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.6:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.7:*:*:*:*:*:*:*","range":[{"introduced":"3.2.7"},{"last_affected":"3.2.7"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.8:*:*:*:*:*:*:*","range":[{"introduced":"3.2.8"},{"last_affected":"3.2.8"}]},{"range":[{"introduced":"3.2.9"},{"last_affected":"3.2.9"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.9:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.10:*:*:*:*:*:*:*","range":[{"introduced":"3.2.10"},{"last_affected":"3.2.10"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.11:*:*:*:*:*:*:*","range":[{"introduced":"3.2.11"},{"last_affected":"3.2.11"}]},{"range":[{"introduced":"3.2.12"},{"last_affected":"3.2.12"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.2.12:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.2.13:*:*:*:*:*:*:*","range":[{"introduced":"3.2.13"},{"last_affected":"3.2.13"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.3.0.2"},{"last_affected":"3.3.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.2:*:*:*:*:*:*:*"},{"range":[{"introduced":"3.3.0.3"},{"last_affected":"3.3.0.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.0.3:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.1:*:*:*:*:*:*:*","range":[{"introduced":"3.3.1"},{"last_affected":"3.3.1"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.2:*:*:*:*:*:*:*","range":[{"introduced":"3.3.2"},{"last_affected":"3.3.2"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.3:*:*:*:*:*:*:*","range":[{"introduced":"3.3.3"},{"last_affected":"3.3.3"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.4:*:*:*:*:*:*:*","range":[{"introduced":"3.3.4"},{"last_affected":"3.3.4"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.3.5"},{"last_affected":"3.3.5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.5:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.6:*:*:*:*:*:*:*","range":[{"introduced":"3.3.6"},{"last_affected":"3.3.6"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.7:*:*:*:*:*:*:*","range":[{"introduced":"3.3.7"},{"last_affected":"3.3.7"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.3.8"},{"last_affected":"3.3.8"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.8:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.9:*:*:*:*:*:*:*","range":[{"introduced":"3.3.9"},{"last_affected":"3.3.9"}]},{"range":[{"introduced":"3.3.10"},{"last_affected":"3.3.10"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.3.10:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.11:*:*:*:*:*:*:*","range":[{"introduced":"3.3.11"},{"last_affected":"3.3.11"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.12:*:*:*:*:*:*:*","range":[{"introduced":"3.3.12"},{"last_affected":"3.3.12"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.3.13:*:*:*:*:*:*:*","range":[{"introduced":"3.3.13"},{"last_affected":"3.3.13"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0.1"},{"last_affected":"3.4.0.1"}],"source":"CPE_STRING"},{"range":[{"introduced":"3.4.0.2"},{"last_affected":"3.4.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.2:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.4.0.3"},{"last_affected":"3.4.0.3"}]},{"range":[{"introduced":"3.4.1"},{"last_affected":"3.4.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.1:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.2:*:*:*:*:*:*:*","range":[{"introduced":"3.4.2"},{"last_affected":"3.4.2"}]},{"range":[{"introduced":"3.4.3"},{"last_affected":"3.4.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.3:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.4:*:*:*:*:*:*:*","range":[{"introduced":"3.4.4"},{"last_affected":"3.4.4"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.4.8:*:*:*:*:*:*:*","range":[{"introduced":"3.4.8"},{"last_affected":"3.4.8"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.9:*:*:*:*:*:*:*","range":[{"introduced":"3.4.9"},{"last_affected":"3.4.9"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.10:*:*:*:*:*:*:*","range":[{"introduced":"3.4.10"},{"last_affected":"3.4.10"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.11:*:*:*:*:*:*:*","range":[{"introduced":"3.4.11"},{"last_affected":"3.4.11"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.12:*:*:*:*:*:*:*","range":[{"introduced":"3.4.12"},{"last_affected":"3.4.12"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:3.4.13:*:*:*:*:*:*:*","range":[{"introduced":"3.4.13"},{"last_affected":"3.4.13"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.1:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0.1"},{"last_affected":"3.5.0.1"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.2:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0.2"},{"last_affected":"3.5.0.2"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.3:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0.3"},{"last_affected":"3.5.0.3"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:3.5.0.4:*:*:*:*:*:*:*","range":[{"introduced":"3.5.0.4"},{"last_affected":"3.5.0.4"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:3.5.1:*:*:*:*:*:*:*","range":[{"introduced":"3.5.1"},{"last_affected":"3.5.1"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:squid-cache:squid:4.0.1:*:*:*:*:*:*:*","range":[{"introduced":"4.0.1"},{"last_affected":"4.0.1"}],"source":"CPE_STRING"},{"range":[{"introduced":"4.0.2"},{"last_affected":"4.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.2:*:*:*:*:*:*:*"},{"range":[{"introduced":"4.0.3"},{"last_affected":"4.0.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.3:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:squid-cache:squid:4.0.4:*:*:*:*:*:*:*","range":[{"introduced":"4.0.4"},{"last_affected":"4.0.4"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:squid-cache:squid:4.0.5:*:*:*:*:*:*:*","range":[{"introduced":"4.0.5"},{"last_affected":"4.0.5"}]},{"cpe":"cpe:2.3:a:squid-cache:squid:4.0.6:*:*:*:*:*:*:*","range":[{"introduced":"4.0.6"},{"last_affected":"4.0.6"}],"source":"CPE_STRING"}]}}],"versions":["3.0.stable1","3.0.stable10","3.0.stable11","3.0.stable11-rc1","3.0.stable12","3.0.stable13","3.0.stable14","3.0.stable15","3.0.stable16","3.0.stable16-rc1","3.0.stable17","3.0.stable18","3.0.stable19","3.0.stable2","3.0.stable20","3.0.stable21","3.0.stable22","3.0.stable23","3.0.stable24","3.0.stable25","3.0.stable3","3.0.stable4","3.0.stable5","3.0.stable6","3.0.stable7","3.0.stable8","3.0.stable9","3.1","3.1.0.1","3.1.0.10","3.1.0.11","3.1.0.12","3.1.0.13","3.1.0.14","3.1.0.15","3.1.0.16","3.1.0.17","3.1.0.18","3.1.0.2","3.1.0.3","3.1.0.4","3.1.0.5","3.1.0.6","3.1.0.7","3.1.0.8","3.1.0.9","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.2","3.1.3","3.1.4","3.1.5","3.1.5.1","3.1.6","3.1.7","3.1.8","3.1.9","3.2.0.1","3.2.0.10","3.2.0.11","3.2.0.12","3.2.0.13","3.2.0.14","3.2.0.15","3.2.0.16","3.2.0.17","3.2.0.18","3.2.0.19","3.2.0.2","3.2.0.3","3.2.0.4","3.2.0.5","3.2.0.6","3.2.0.7","3.2.0.8","3.2.0.9","3.2.1","3.2.10","3.2.11","3.2.12","3.2.13","3.2.2","3.2.3","3.2.4","3.2.5","3.2.6","3.2.7","3.2.8","3.2.9","3.3.0.2","3.3.0.3","3.3.1","3.3.10","3.3.11","3.3.12","3.3.13","3.3.2","3.3.3","3.3.4","3.3.5","3.3.6","3.3.7","3.3.8","3.3.9","3.4.0.1","3.4.0.2","3.4.0.3","3.4.1","3.4.10","3.4.11","3.4.12","3.4.13","3.4.2","3.4.3","3.4.4","3.4.8","3.4.9","3.5.0.1","3.5.0.2","3.5.0.3","3.5.0.4","3.5.1","4.0.1","4.0.2","4.0.3","4.0.4","4.0.5","4.0.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2571.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}