Description

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

Remediation

References

CVE-2014-6270

Related Vulnerabilities

MongoDb Resource Management Errors Vulnerability (CVE-2013-3969)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-37251)

Oracle Application Server Other Vulnerability (CVE-2007-0289)

WordPress Plugin Elements For Elementor Local File Inclusion (2.1)

WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.15)

Severity

Medium

Classification

CVE-2014-6270 CWE-119

Tags

Missing Update Known Vulnerabilities