CVE-2011-4096 in Proxy
Résumé (Anglaise)
The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Réserver
18/10/2011
Divulgation
17/11/2011
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 4435 | Squid Proxy DNS Reply déni de service | 399 | Non défini | Correctif officiel | CVE-2011-4096 |