CVE-2014-6270

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x
and 3.x, when an SNMP port is configured, allows remote attackers to cause
a denial of service (crash) or possibly execute arbitrary code via a
crafted UDP SNMP request, which triggers a heap-based buffer overflow.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761002&gt;
• <https://bugzilla.novell.com/show_bug.cgi?id=895773&gt;