CVE-2014-0128
NoneCVSS
—
EPSS
32.6%
Published
Apr 14, 2014
CISA due date
—
The record
Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:3 | squid | 0 | 3.2.10-1.6.mga3 |
| Mageia:4 | squid | 0 | 3.3.12-1.mga4 |
| Red Hat:enterprise_linux:6::server | squid | 0 | 7:3.1.10-20.el6_5.3 |
| Red Hat:enterprise_linux:6::server | squid-debuginfo | 0 | 7:3.1.10-20.el6_5.3 |
| Red Hat:enterprise_linux:6::workstation | squid | 0 | 7:3.1.10-20.el6_5.3 |
| Red Hat:enterprise_linux:6::workstation | squid-debuginfo | 0 | 7:3.1.10-20.el6_5.3 |
| SUSE:Linux Enterprise Server 11 SP4 | squid3 | 0 | 3.1.23-8.16.30.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | squid3 | 0 | 3.1.23-8.16.30.1 |
| Ubuntu:14.04:LTS | squid3 | 0 | 3.3.8-1ubuntu6.6 |
Related vulnerabilities
- CVE-2014-7142 The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive… Also affects squid
- CVE-2014-7141 The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive… Also affects squid
- CVE-2014-6270 Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when… Also affects squid
- CVE-2014-3609 HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers… Also affects squid
- CVE-2013-4123 client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote… Also affects squid
- CVE-2013-4115 Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through… Also affects squid
- CVE-2015-3455 Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before… Also affects squid
- CVE-2016-4556 Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10… Also affects squid