Squid snmpHandleUdp Off-by-one Buffer Overflow (CVE-2014-6270)

A code execution vulnerability has been reported in Squid. The vulnerability is due to an off-by-one error resulting in buffer overflow in snmpHandleUdp function. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to an affected server. A...

Heap overflow

Off-by-one error in the snmpHandleUdp function in snmpcore.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow...

CVE-2014-6270

CVE-2014-6270: In Squid 2.x and 3.x, an off-by-one error in the SNMP subsystem (snmpHandleUdp in snmp_core.cc) when an SNMP port is configured can be triggered by a crafted UDP SNMP request, leading to a heap-based buffer overflow and potentially remote denial of service or arbitrary code executi...