CVE-2014-7142
Fixed in a distro release EPSS 25%
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
Products: oracle solaris, canonical ubuntu_linux, squid-cache squid
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | squid | 4.1-1 |
| Debian 13 | squid | 4.1-1 |
| Debian 14 | squid | 4.1-1 |
| SUSE Linux Enterprise Server 11 SP4 | squid3 | 3.1.23-8.16.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | squid3 | 3.1.23-8.16.30.1 |
| Ubuntu 14.04 LTS | squid3 | 3.3.8-1ubuntu6.2 |
| openSUSE Tumbleweed | squid | 3.5.22-1.1 |