CVE-2016-5408

Critical

Published: 10/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before version 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code.

Risk Assessment

This vulnerability poses a serious risk to organizations by allowing remote attackers to gain control over the system.

Recommendation

It is recommended to update the squid package to version 3.1.23-16.el6_8.6 or later to mitigate this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051.