CVE-2014-6270 in Squid Proxy
摘要 (英语)
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.
预定
2014-09-09
披露
2014-09-12
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 67520 | Squid Proxy SNMP snmp_core.cc snmpHandleUdp 内存损坏 | 119 | 未经证实 | 官方修复 | CVE-2014-6270 |