CVE-2014-6270 in Proxy

Resumen (Inglés)

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2014-09-09

Divulgación

2014-09-12

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
67520	Squid Proxy SNMP snmp_core.cc snmpHandleUdp desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2014-6270

Fuentes

• MITRE
• NVD
• CVE Details