CVE-2016-4554

Name of the Vulnerable Software and Affected Versions Squid versions prior to 3.5.18

Description The issue allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, also known as a "header smuggling" issue. This is related to the mime header.cc file in Squid.

Recommendations For versions prior to 3.5.18, update to version 3.5.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the mime header.cc functionality until a patch is available. Avoid using manipulated HTTP Host headers in the affected Squid versions until the issue is resolved.