{"id":"CVE-2013-0188","aliases":["EUVD-2013-0224","SUSE-SU-2016:2089-1"],"status":"rejected","title":"Security update for squid3","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-0189, CVE-2013-0191.  Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues.  Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2013-10-04T23:00:00Z","modified":"2026-02-04T03:13:42Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.30.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.30.1"}]}],"bundled":25}],"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162089-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/895773","tags":["report"]},{"url":"https://bugzilla.suse.com/902197","tags":["report"]},{"url":"https://bugzilla.suse.com/938715","tags":["report"]},{"url":"https://bugzilla.suse.com/963539","tags":["report"]},{"url":"https://bugzilla.suse.com/967011","tags":["report"]},{"url":"https://bugzilla.suse.com/968392","tags":["report"]},{"url":"https://bugzilla.suse.com/968393","tags":["report"]},{"url":"https://bugzilla.suse.com/968394","tags":["report"]},{"url":"https://bugzilla.suse.com/968395","tags":["report"]},{"url":"https://bugzilla.suse.com/973782","tags":["report"]},{"url":"https://bugzilla.suse.com/973783","tags":["report"]},{"url":"https://bugzilla.suse.com/976553","tags":["report"]},{"url":"https://bugzilla.suse.com/976556","tags":["report"]},{"url":"https://bugzilla.suse.com/976708","tags":["report"]},{"url":"https://bugzilla.suse.com/979008","tags":["report"]},{"url":"https://bugzilla.suse.com/979009","tags":["report"]},{"url":"https://bugzilla.suse.com/979010","tags":["report"]},{"url":"https://bugzilla.suse.com/979011","tags":["report"]},{"url":"https://bugzilla.suse.com/993299","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4556","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-0188","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-0189, CVE-2013-0191.  Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues.  Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2013-10-04T23:00:00Z","modified":"2024-09-17T01:47:02.689Z","updated_at":"2026-11-02T14:34:59.222149Z"}],"euvd":[{"id":"EUVD-2013-0224","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-0189, CVE-2013-0191.  Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues.  Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2013-10-04T23:00:00Z","modified":"2024-09-17T01:47:02Z","updated_at":"2026-11-03T00:28:46.561775Z"}],"nvd":[{"id":"CVE-2013-0188","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-0189, CVE-2013-0191.  Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues.  Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2013-10-04T23:55:03.407Z","modified":"2023-11-07T02:13:46.26Z","updated_at":"2026-11-02T14:02:38.715467Z"}],"osv":[{"id":"SUSE-SU-2016:2089-1","title":"Security update for squid3","description":"\n\nThis update for squid3 fixes the following issues:\n\n- Multiple issues in pinger ICMP processing.  (CVE-2014-7141, CVE-2014-7142) \n\n- CVE-2016-3947: Buffer overrun issue in pinger\n    ICMPv6 processing. (bsc#973782)\n\n-  CVE-2016-4554: fix header smuggling issue in HTTP Request processing (bsc#979010)\n\n- Fix multiple Denial of Service issues in HTTP Response processing.\n    (CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572,\n     bsc#968392, bsc#968393, bsc#968394, bsc#968395)\n- Regression caused by the DoS fixes above (bsc#993299)\n\n- CVE-2016-3948: Fix denial of service in HTTP Response processing (bsc#973783)\n\n- CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553)\n\n- CVE-2016-4052, CVE-2016-4053, CVE-2016-4054:\n  * fixes multiple issues in ESI processing (bsc#976556)\n\n- CVE-2016-4556: fixes double free vulnerability in Esi.cc (bsc#979008)\n\n- CVE-2015-5400: Improper Protection of Alternate Path (bsc#938715)\n\n- CVE-2014-6270: fix off-by-one in snmp subsystem (bsc#895773)\n\n- Memory leak in squid3 when using external_acl (bsc#976708)\n","status":"published","published":"2016-08-16T12:56:03Z","modified":"2026-02-04T03:13:42.545823Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}