Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2011-4096

Published: 17/11/2011 Updated: 28/11/2016
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Squid

Vulnerability Summary

The idnsGrokReply function in Squid prior to 3.1.16 does not properly free memory, which allows remote malicious users to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

Vulnerable Product Search on Vulmon Subscribe to Product

squid-cache squid 3.1.0.5

squid-cache squid 3.1.0.9

squid-cache squid 3.1.0.8

squid-cache squid 3.1.0.11

squid-cache squid 3.1.0.16

squid-cache squid 3.1.0.2

squid-cache squid 3.1.0.3

squid-cache squid 3.1.13

squid-cache squid 3.1.14

squid-cache squid 3.0

squid-cache squid 3.0.stable24

squid-cache squid 3.0.stable18

squid-cache squid 3.0.stable16

squid-cache squid 3.0.stable15

squid-cache squid 3.0.stable9

squid-cache squid 3.0.stable5

squid-cache squid 3.0.stable1

squid-cache squid 3.1.5.1

squid-cache squid 3.1.5

squid-cache squid 3.1.0.7

squid-cache squid 3.1.0.6

squid-cache squid 3.1.0.12

squid-cache squid 3.1.0.17

squid-cache squid 3.1.0.18

squid-cache squid 3.1.0.4

squid-cache squid 3.1.8

squid-cache squid

squid-cache squid 3.0.stable23

squid-cache squid 3.0.stable10

squid-cache squid 3.0.stable22

squid-cache squid 3.0.stable19

squid-cache squid 3.0.stable8

squid-cache squid 3.0.stable4

squid-cache squid 3.0.stable3

squid-cache squid 3.1.7

squid-cache squid 3.1.6

squid-cache squid 3.1.0.15

squid-cache squid 3.1.0.10

squid-cache squid 3.1

squid-cache squid 3.1.0.1

squid-cache squid 3.1.11

squid-cache squid 3.1.12

squid-cache squid 3.0.stable21

squid-cache squid 3.0.stable17

squid-cache squid 3.0.stable14

squid-cache squid 3.0.stable13

squid-cache squid 3.0.stable11

squid-cache squid 3.0.stable6

squid-cache squid 3.1.4

squid-cache squid 3.1.3

squid-cache squid 3.1.0.13

squid-cache squid 3.1.0.14

squid-cache squid 3.1.1

squid-cache squid 3.1.2

squid-cache squid 3.1.9

squid-cache squid 3.1.10

squid-cache squid 3.0.stable25

squid-cache squid 3.0.stable20

squid-cache squid 3.0.stable12

squid-cache squid 3.0.stable7

squid-cache squid 3.0.stable2

Vendor Advisories

Red Hat: Moderate: squid security update
Synopsis Moderate: squid security update Type/Severity Security Advisory: Moderate Topic An updated squid package that fixes one security issue is now available forRed Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vulnerability Sc ...

References

CWE-399http://www.securitytracker.com/id?1026265http://www.openwall.com/lists/oss-security/2011/11/01/3http://secunia.com/advisories/46609http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID_3_1_16.htmlhttp://www.openwall.com/lists/oss-security/2011/10/31/5http://bugs.squid-cache.org/show_bug.cgi?id=3237#c12http://www.mandriva.com/security/advisories?name=MDVSA-2011:193http://www.redhat.com/support/errata/RHSA-2011-1791.htmlhttp://secunia.com/advisories/47459http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.htmlhttps://access.redhat.com/errata/RHSA-2011:1791https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook