← Back

CVE-2011-4096

nvd nist
Published: Nov 17, 2011Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

Affected (87)

Products: Squid Cache: Squid
1 product
Squid
Configuration A
87 vulnerable
Vulnerable SoftwareAffected Versions
Squid Cache
Up to 3.1.15
Version 3.0.stable10
Version 3.0.stable11
Version 3.0.stable11 rc1
Version 3.0.stable12
Version 3.0.stable13
Version 3.0.stable14
Version 3.0.stable15
Version 3.0.stable16
Version 3.0.stable16 rc1
Version 3.0.stable17
Version 3.0.stable18
Version 3.0.stable19
Version 3.0.stable1
Version 3.0.stable20
Version 3.0.stable21
Version 3.0.stable22
Version 3.0.stable23
Version 3.0.stable24
Version 3.0.stable25
Version 3.0.stable2
Version 3.0.stable3
Version 3.0.stable4
Version 3.0.stable5
Version 3.0.stable6
Version 3.0.stable7
Version 3.0.stable8
Version 3.0.stable9
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0 rc1
Version 3.0 rc4
Version 3.1.0.10
Version 3.1.0.11
Version 3.1.0.12
Version 3.1.0.13
Version 3.1.0.14
Version 3.1.0.15
Version 3.1.0.16
Version 3.1.0.17
Version 3.1.0.18
Version 3.1.0.1
Version 3.1.0.2
Version 3.1.0.3
Version 3.1.0.4
Version 3.1.0.5
Version 3.1.0.6
Version 3.1.0.7
Version 3.1.0.8
Version 3.1.0.9
Version 3.1.10
Version 3.1.11
Version 3.1.12
Version 3.1.13
Version 3.1.14
Version 3.1.1
Version 3.1.2
Version 3.1.3
Version 3.1.4
Version 3.1.5.1
Version 3.1.5
Version 3.1.6
Version 3.1.7
Version 3.1.8
Version 3.1.9
Version 3.1

Related CWEs

References (22)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.