CVEvulnerability

CVE-2014-6270

6.8 MEDIUM Published 2014-09-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

Affected configurations

• squid-cache squid 2.4.stable1 • squid-cache squid 2.4.stable2 • squid-cache squid 2.4.stable3 • squid-cache squid 2.4.stable4 • squid-cache squid 2.4.stable5 • squid-cache squid 2.4.stable6 • squid-cache squid 2.4.stable7 • squid-cache squid 2.5.stable1 • squid-cache squid 2.5.stable2 • squid-cache squid 2.5.stable3 • squid-cache squid 2.5.stable4 • squid-cache squid 2.5.stable5 • squid-cache squid 2.5.stable6 • squid-cache squid 2.5.stable7 • squid-cache squid 2.5.stable8 • squid-cache squid 2.5.stable9 • squid-cache squid 2.5.stable10 • squid-cache squid 2.5.stable11 • squid-cache squid 2.5.stable12 • squid-cache squid 2.5.stable13 • squid-cache squid 2.5.stable14 • squid-cache squid 2.6.stable1 • squid-cache squid 2.6.stable2 • squid-cache squid 2.6.stable3 • squid-cache squid 2.6.stable4 • squid-cache squid 2.6.stable5 • squid-cache squid 2.6.stable6 • squid-cache squid 2.6.stable7 • squid-cache squid 2.6.stable8 • squid-cache squid 2.6.stable9 • squid-cache squid 2.6.stable10 • squid-cache squid 2.6.stable11 • squid-cache squid 2.6.stable12 • squid-cache squid 2.6.stable13 • squid-cache squid 2.6.stable14 • squid-cache squid 2.6.stable15 • squid-cache squid 2.6.stable16 • squid-cache squid 2.6.stable17 • squid-cache squid 2.6.stable18 • squid-cache squid 2.6.stable19 • squid-cache squid 2.6.stable20 • squid-cache squid 2.6.stable21 • squid-cache squid 2.6.stable22 • squid-cache squid 2.6.stable23 • squid-cache squid 2.7.stable1 • squid-cache squid 2.7.stable2 • squid-cache squid 2.7.stable3 • squid-cache squid 2.7.stable4 • squid-cache squid 2.7.stable5 • squid-cache squid 2.7.stable6 • squid-cache squid 2.7.stable7 • squid-cache squid 2.7.stable8 • squid-cache squid 2.7.stable9 • squid-cache squid 3.0 • squid-cache squid 3.0.stable1 • squid-cache squid 3.0.stable2 • squid-cache squid 3.0.stable3 • squid-cache squid 3.0.stable4 • squid-cache squid 3.0.stable5 • squid-cache squid 3.0.stable6 … and 111 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References