CVE-2014-7141 in Squid Proxy

Summary

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.

Reservation

09/22/2014

Disclosure

11/26/2014

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
68285	Squid Proxy Pinger data processing	19	Unproven	Official fix	CVE-2014-7141
67519	Squid Proxy ICMP Reply Icmp4.cc denial of service	404	Unproven	Official fix	CVE-2014-7141