← back
CVE-2013-4115

CVE-2013-4115

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 43%
exploitation probability
43%top 1% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.
Affected products
n/a · n/a
References
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.htmlhttp://lists.opensuse.org/opensuse-updates/2013-09/msg00024.htmlhttp://lists.opensuse.org/opensuse-updates/2013-09/msg00025.htmlhttp://lists.opensuse.org/opensuse-updates/2013-09/msg00030.htmlhttp://lists.opensuse.org/opensuse-updates/2013-09/msg00032.htmlhttp://lists.opensuse.org/opensuse-updates/2013-09/msg00033.htmlhttp://secunia.com/advisories/54076http://secunia.com/advisories/54834http://secunia.com/advisories/54839https://exchange.xforce.ibmcloud.com/vulnerabilities/85564http://www.openwall.com/lists/oss-security/2013/07/11/8