CVE-2016-4051: Canonical Ubuntu Linux

High severity, CVSS 8.8. EPSS: 18.3% chance of exploitation in the next 30 days.

Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only; version 16.04 only
• Oracle Linux: version 6 only; version 7 only
• Squid-Cache Squid: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.5 only; …

Published 2016-04-25. Last modified 2026-06-17.