CVE-2016-5408 Memory corruption in n/a
Remote attackers can execute arbitrary code via a stack-based buffer overflow in the Squid proxy server's cache manager CGI script.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-5408?
CVE-2016-5408 is a critical memory corruption vulnerability in Oracle Linux, published on 10 Aug 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051.
Weakness: CWE-119
Which versions are affected by CVE-2016-5408?
It affects 3 products.
Linux distribution packages (4)
squid Red Hat:enterprise_linux:6::server | All versions | 7:3.1.23-16.el6_8.6 |
squid-debuginfo Red Hat:enterprise_linux:6::server | All versions | 7:3.1.23-16.el6_8.6 |
squid Red Hat:enterprise_linux:6::workstation | All versions | 7:3.1.23-16.el6_8.6 |
squid-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 7:3.1.23-16.el6_8.6 |
Products include Oracle Linux, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2016-5408?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-5408 being exploited?
There is no known exploitation of CVE-2016-5408 in the wild and no public exploit code.
Other vulnerabilities in Oracle Linux
Sources
Also known as DLA-556-1, GHSA-5f9j-8ghm-9gxx, RHSA-2016:1573.