CVE-2013-4115
NoneCVSS
—
EPSS
43.9%
Published
Aug 9, 2013
CISA due date
—
The record
Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:2 | squid | 0 | 3.1.19-4.4.mga2 |
| Mageia:3 | squid | 0 | 3.2.10-1.4.mga3 |
| Red Hat:enterprise_linux:5::client_workstation | squid | 0 | 7:2.6.STABLE21-7.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | squid-debuginfo | 0 | 7:2.6.STABLE21-7.el5_10 |
| Red Hat:enterprise_linux:5::server | squid | 0 | 7:2.6.STABLE21-7.el5_10 |
| Red Hat:enterprise_linux:5::server | squid-debuginfo | 0 | 7:2.6.STABLE21-7.el5_10 |
| Red Hat:enterprise_linux:6::server | squid | 0 | 7:3.1.10-22.el6_5 |
| Red Hat:enterprise_linux:6::server | squid-debuginfo | 0 | 7:3.1.10-22.el6_5 |
| Red Hat:enterprise_linux:6::workstation | squid | 0 | 7:3.1.10-22.el6_5 |
| Red Hat:enterprise_linux:6::workstation | squid-debuginfo | 0 | 7:3.1.10-22.el6_5 |
| SUSE:Linux Enterprise Server 11 SP4 | squid3 | 0 | 3.1.23-8.16.30.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | squid3 | 0 | 3.1.23-8.16.30.1 |
Related vulnerabilities
- CVE-2014-7142 The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive… Also affects squid
- CVE-2014-7141 The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive… Also affects squid
- CVE-2014-6270 Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when… Also affects squid
- CVE-2014-3609 HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers… Also affects squid
- CVE-2014-0128 Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote… Also affects squid
- CVE-2013-4123 client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote… Also affects squid
- CVE-2010-0308 lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows… Also affects squid
- CVE-2009-2855 The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers… Also affects squid