CVE-2016-3948

—

CVSS 3.0

7.5 high

EPSS

35%p98

Published

Apr 7, 2016 (Apr 7, 2016)

Modified

Jun 17, 2026

Description

Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.

Vendors: squid-cache
Products: squid
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (35.3%)

In the news0 stories

No ingested article mentions this CVE yet.