CVE-2014-6270

squid: off-by-one error in snmpHandleUdp() leading to a bss-based buffer overflow (SQUID-2014:3)

Published Sep 12, 2014 CVSS 2.0 · 6.8 Medium EPSS 23.3% KEV · Not listed
Description
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-6156 Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.
Ubuntu USN Ubuntu USN USN-2921-1 Squid vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.18974}

epss

{'score': 0.19915}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 12:10 PM
Reserved
Sep 9, 2014, 12:00 AM
Status
Modified
Published
Sep 12, 2014, 2:55 PM
Modified
Jun 17, 2026, 12:12 AM
Severity
Moderate
Public date
Sep 9, 2014, 12:00 AM