squid proxy server buffer overflow
Published:		02.01.2012
Source:		BUGTRAQ
SecurityVulns ID:		12124
Type:		remote
Level:		5/10
Description:		Crash on DNS response parsing.

Affected:		SQUID : squid 3.1
CVE:		CVE-2011-4096 (The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.)

Original document

MANDRIVA, [ MDVSA-2011:193 ] squid (02.01.2012)

Discuss:

Read or add your comments to this news (0 comments)