Squid snmpHandleUdp Off-by-one Buffer Overflow (CVE-2014-6270)

A code execution vulnerability has been reported in Squid. The vulnerability is due to an off-by-one error resulting in buffer overflow in snmpHandleUdp function. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to an affected server. A...

Heap overflow

Off-by-one error in the snmpHandleUdp function in snmpcore.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow...

CVE-2014-6270

Off-by-one error in the snmpHandleUdp function in snmpcore.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow...

CVE-2014-6270

CVE-2014-6270: In Squid 2.x and 3.x, an off-by-one error in the SNMP subsystem (snmpHandleUdp in snmp_core.cc) when an SNMP port is configured can be triggered by a crafted UDP SNMP request, leading to a heap-based buffer overflow and potentially remote denial of service or arbitrary code executi...

PT-2014-1708

Name of the Vulnerable Software and Affected Versions Squid versions 2.x through 3.x Description The issue is related to an off-by-one error in the snmpHandleUdp function, which can be exploited by remote attackers. This error occurs when a specially crafted UDP SNMP request is sent, leading to a...