CVE-2011-4096 in Proxy
Zusammenfassung (Englisch)
The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservieren
18.10.2011
Veröffentlichung
17.11.2011
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 4435 | Squid DNS Replies Invalid Free Denial of Service | 399 | Nicht definiert | Offizieller Fix | CVE-2011-4096 |