---
cve: "CVE-2016-10003"
severity: "LOW"
cvss: 3.1
epss: "4.8%"
vendor: "n/a"
kev: false
exploited: false
published: "2017-01-27 17:59:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-19T21:29:51+02:00"
---

# CVE-2016-10003

> 3.1 LOW

## Beschreibung

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

## Patch verfügbar (OSV)

- 4fef4b02fa0fb9892b6add644d30e326ef11a918 (Commit)
- 3f422b10d779df353482d0b2b2b8f7f9d03cf593 (Commit)

## Referenzen

- <http://www.openwall.com/lists/oss-security/2016/12/18/1>
- <http://www.securitytracker.com/id/1037512>
- <http://www.securityfocus.com/bid/94953>
- <http://www.squid-cache.org/Advisories/SQUID-2016_10.txt>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2016-10003) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_