CVE-2014-6270
Fixed in a distro release EPSS 23%
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.
Products: squid-cache squid, oracle solaris
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | squid | 4.1-1 |
| Debian 13 | squid | 4.1-1 |
| Debian 14 | squid | 4.1-1 |
| SUSE Linux Enterprise Server 11 SP3 | squid | 2.7.STABLE5-2.12.24.2 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | squid | 2.7.STABLE5-2.12.24.2 |
| SUSE Linux Enterprise Server 11 SP4 | squid | 2.7.STABLE5-2.12.24.2 |
| SUSE Linux Enterprise Server 11 SP4 | squid3 | 3.1.23-8.16.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | squid | 2.7.STABLE5-2.12.24.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | squid | 2.7.STABLE5-2.12.24.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | squid3 | 3.1.23-8.16.30.1 |
| Ubuntu 14.04 LTS | squid3 | 3.3.8-1ubuntu6.6 |