Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-4096HistoryNov 17, 2011 - 7:55 p.m.
CVE-2011-4096
2011-11-1719:55:00
Debian Security Bug Tracker
security-tracker.debian.org
6
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | squid3 | < 3.5.23-5+deb9u1 | squid3_3.5.23-5+deb9u1_all.deb |
Related
checkpoint_advisories
checkpoint_advisories
Squid DNS Replies Invalid Free Code Execution (CVE-2011-4096)
2012-01-12 00:00:00
openvas
openvas
Fedora Update for squid FEDORA-2011-15256
2011-11-18 00:00:00
CentOS Update for squid CESA-2011:1791 centos6
2012-07-30 00:00:00
RedHat Update for squid RHSA-2011:1791-01
2012-07-09 00:00:00
nessus
nessus
Squid 3.1.x < 3.1.16 / 3.2.x < 3.2.0.13 DNS Replies CName Record Parsing Remote DoS
2011-12-14 00:00:00
Oracle Linux 6 : squid (ELSA-2011-1791)
2013-07-12 00:00:00
CentOS 6 : squid (CESA-2011:1791)
2011-12-23 00:00:00
oraclelinux
oraclelinux
squid security update
2011-12-14 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: squid-3.1.16-1.fc14
2011-11-17 23:32:07
[SECURITY] Fedora 15 Update: squid-3.1.16-1.fc15
2011-11-17 23:38:53
cve
cve
CVE-2011-4096
2011-11-17 19:55:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:05:55
ubuntucve
ubuntucve
CVE-2011-4096
2011-11-17 00:00:00
centos
centos
squid security update
2011-12-22 15:56:24
redhat
redhat
(RHSA-2011:1791) Moderate: squid security update
2011-12-06 00:00:00
debian
debian
[SECURITY] [DSA 2381-1] squid3 security update
2012-01-06 14:28:52
securityvulns
securityvulns
[ MDVSA-2011:193 ] squid
2012-01-02 00:00:00
squid proxy server buffer overflow
2012-01-02 00:00:00
osv
osv
squid3 - invalid memory deallocation
2012-01-06 00:00:00
prion
prion
Memory corruption
2011-11-17 19:55:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2013-09-27 00:00:00
suse
suse
Security update for squid3 (important)
2016-08-09 17:12:26
Security update for squid3 (important)
2016-08-16 18:08:55
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related for DEBIANCVE:CVE-2011-4096