CVE-2013-4115

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 43%

probabilidade de exploração

43%top 1% das CVEs

exploração observada

nãonenhuma fonte reporta

Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.

Produtos afetados

n/a · n/a

Referências

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html http://lists.opensuse.org/opensuse-updates/2013-09/msg00024.html http://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html http://lists.opensuse.org/opensuse-updates/2013-09/msg00030.html http://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html http://lists.opensuse.org/opensuse-updates/2013-09/msg00033.html http://secunia.com/advisories/54076 http://secunia.com/advisories/54834 http://secunia.com/advisories/54839 https://exchange.xforce.ibmcloud.com/vulnerabilities/85564 http://www.openwall.com/lists/oss-security/2013/07/11/8