{"id":"CVE-2016-2572","details":"http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.","modified":"2026-04-10T03:50:42.237226Z","published":"2016-02-27T05:59:06.797Z","related":["SUSE-SU-2016:2008-1","SUSE-SU-2016:2089-1"],"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2016/02/26/2"},{"type":"WEB","url":"http://www.securitytracker.com/id/1035101"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2016-2600.html"},{"type":"ADVISORY","url":"http://www.squid-cache.org/Advisories/SQUID-2016_2.txt"},{"type":"ADVISORY","url":"http://www.squid-cache.org/Versions/v4/changesets/squid-4-14548.patch"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201607-01"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/squid-cache/squid","events":[{"introduced":"0"},{"last_affected":"1243ec712bf76c549ba7f48fcdc30d98ce550449"},{"introduced":"0"},{"last_affected":"6c4d7196d05c95c406bafce712c8768cc8dc3beb"},{"introduced":"0"},{"last_affected":"2552ca552397fb9d23f06d4f1211c505205aee95"},{"introduced":"0"},{"last_affected":"78121f9a195344616290ecdd4f7f9dd521daaf1a"},{"introduced":"0"},{"last_affected":"ff87fda5fe2e205785b15ebdb243ad812effc981"},{"introduced":"0"},{"last_affected":"404063c59bb4ffa6c5a005611c4375f82ddd423f"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"4.0.1"},{"introduced":"0"},{"last_affected":"4.0.2"},{"introduced":"0"},{"last_affected":"4.0.3"},{"introduced":"0"},{"last_affected":"4.0.4"},{"introduced":"0"},{"last_affected":"4.0.5"},{"introduced":"0"},{"last_affected":"4.0.6"}]}}],"versions":["HISTORIC_RELEASES","SQUID_3_0_PRE1","SQUID_3_0_PRE2","SQUID_3_0_PRE3","SQUID_3_0_PRE4","SQUID_3_0_PRE5","SQUID_3_0_PRE6","SQUID_3_0_PRE7","SQUID_3_0_RC1","SQUID_4_0_1","SQUID_4_0_2","SQUID_4_0_3","SQUID_4_0_4","SQUID_4_0_5","SQUID_4_0_6","take00"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2572.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}