Vulnetix
Try Vulnetix Request Demo
CVE-2014-6270 PUBLISHED

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

EPSS 18.20% · 95.1th percentile

Risk Scores

EPSS Score
18.20%
95.1th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSsquid30, 3.3.8-1ubuntu3, 3.3.8-1ubuntu4

Timeline

References

Open in Interactive Console →