← Back

CVE-2014-6270

nvd nist
Published: Sep 12, 2014Modified: May 6, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

Affected (181)

1 product
Squid
1 product
Solaris
Configuration A
180 vulnerable
Vulnerable SoftwareAffected Versions
Squid Cache
Version 2.4.stable1
Version 2.4.stable2
Version 2.4.stable3
Version 2.4.stable4
Version 2.4.stable5
Version 2.4.stable6
Version 2.4.stable7
Version 2.5.stable10
Version 2.5.stable11
Version 2.5.stable12
Version 2.5.stable13
Version 2.5.stable14
Version 2.5.stable1
Version 2.5.stable2
Version 2.5.stable3
Version 2.5.stable4
Version 2.5.stable5
Version 2.5.stable6
Version 2.5.stable7
Version 2.5.stable8
Version 2.5.stable9
Version 2.6.stable10
Version 2.6.stable11
Version 2.6.stable12
Version 2.6.stable13
Version 2.6.stable14
Version 2.6.stable15
Version 2.6.stable16
Version 2.6.stable17
Version 2.6.stable18
Version 2.6.stable19
Version 2.6.stable1
Version 2.6.stable20
Version 2.6.stable21
Version 2.6.stable22
Version 2.6.stable23
Version 2.6.stable2
Version 2.6.stable3
Version 2.6.stable4
Version 2.6.stable5
Version 2.6.stable6
Version 2.6.stable7
Version 2.6.stable8
Version 2.6.stable9
Version 2.7.stable1
Version 2.7.stable2
Version 2.7.stable3
Version 2.7.stable4
Version 2.7.stable5
Version 2.7.stable6
Version 2.7.stable7
Version 2.7.stable8
Version 2.7.stable9
Version 3.0.stable10
Version 3.0.stable11
Version 3.0.stable11 rc1
Version 3.0.stable12
Version 3.0.stable13
Version 3.0.stable14
Version 3.0.stable15
Version 3.0.stable16
Version 3.0.stable16 rc1
Version 3.0.stable17
Version 3.0.stable18
Version 3.0.stable19
Version 3.0.stable1
Version 3.0.stable20
Version 3.0.stable21
Version 3.0.stable22
Version 3.0.stable23
Version 3.0.stable24
Version 3.0.stable25
Version 3.0.stable2
Version 3.0.stable3
Version 3.0.stable4
Version 3.0.stable5
Version 3.0.stable6
Version 3.0.stable7
Version 3.0.stable8
Version 3.0.stable9
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0 rc4
Version 3.1.0.10
Version 3.1.0.11
Version 3.1.0.12
Version 3.1.0.13
Version 3.1.0.14
Version 3.1.0.15
Version 3.1.0.16
Version 3.1.0.17
Version 3.1.0.18
Version 3.1.0.1
Version 3.1.0.2
Version 3.1.0.3
Version 3.1.0.4
Version 3.1.0.5
Version 3.1.0.6
Version 3.1.0.7
Version 3.1.0.8
Version 3.1.0.9
Version 3.1.10
Version 3.1.11
Version 3.1.12
Version 3.1.13
Version 3.1.14
Version 3.1.15
Version 3.1.1
Version 3.1.2
Version 3.1.3
Version 3.1.4
Version 3.1.5.1
Version 3.1.5
Version 3.1.6
Version 3.1.7
Version 3.1.8
Version 3.1.9
Version 3.1
Version 3.2.0.10
Version 3.2.0.11
Version 3.2.0.12
Version 3.2.0.13
Version 3.2.0.14
Version 3.2.0.15
Version 3.2.0.16
Version 3.2.0.17
Version 3.2.0.18
Version 3.2.0.19
Version 3.2.0.1
Version 3.2.0.2
Version 3.2.0.3
Version 3.2.0.4
Version 3.2.0.5
Version 3.2.0.6
Version 3.2.0.7
Version 3.2.0.8
Version 3.2.0.9
Version 3.2.10
Version 3.2.11
Version 3.2.12
Version 3.2.1
Version 3.2.2
Version 3.2.3
Version 3.2.4
Version 3.2.5
Version 3.2.6
Version 3.2.7
Version 3.2.8
Version 3.2.9
Version 3.3.0.2
Version 3.3.0.3
Version 3.3.0
Version 3.3.10
Version 3.3.11
Version 3.3.12
Version 3.3.1
Version 3.3.2
Version 3.3.3
Version 3.3.4
Version 3.3.5
Version 3.3.6
Version 3.3.7
Version 3.3.8
Version 3.3.9
Version 3.4.0.1
Version 3.4.0.2
Version 3.4.0.3
Version 3.4.1
Version 3.4.2
Version 3.4.3
Version 3.4.4
Version 3.4.5
Version 3.4.6
Version 3.4.7
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 11.2

References (22)

Source: cve@mitre.org
PatchThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Issue TrackingThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Issue TrackingThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.