CVE:CVE-2016-4553
CNNVD:CNNVD-201605-179
Squid（全称Squid Cache）是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid 3.5.18之前版本和4.0.10之前4.x版本中的client_side.cc文件存在安全漏洞，该漏洞源于当用户提供absolute-URI时，程序没有正确忽略Host头。远程攻击者可通过提供HTTP请求利用该漏洞实施缓存中毒攻击。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade squid-cache squid to a higher version than 3.5.17,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,and avoid the version (,3.5.17],4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9; Upgrade oracle linux to a higher version than 7,and avoid the version 7