CVE-2014-7141 in Proxy

Resumen (Inglés)

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2014-09-22

Divulgación

2014-11-26

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
68285	Squid Proxy Pinger denegación de servicio	19	No probado	Arreglo oficial	CVE-2014-7141
67519	Squid Proxy ICMP Reply Icmp4.cc denegación de servicio	404	No probado	Arreglo oficial	CVE-2014-7141

Fuentes

• MITRE
• NVD
• CVE Details