Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-4096
HistoryNov 17, 2011 - 7:55 p.m.

CVE-2011-4096

2011-11-1719:55:01
CWE-399
[email protected]
web.nvd.nist.gov
118
squid
cve-2011-4096
idnsgrokreply
memory issue
denial of service
dns
daemon
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.1 High

AI Score

Confidence

High

0.935 High

EPSS

Percentile

99.1%

JSON

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

Affected configurations

NVD
Node
squid-cachesquidRange≤3.1.15
OR
squid-cachesquidMatch3.0
OR
squid-cachesquidMatch3.0pre1
OR
squid-cachesquidMatch3.0pre2
OR
squid-cachesquidMatch3.0pre3
OR
squid-cachesquidMatch3.0pre4
OR
squid-cachesquidMatch3.0pre5
OR
squid-cachesquidMatch3.0pre6
OR
squid-cachesquidMatch3.0pre7
OR
squid-cachesquidMatch3.0stable1
OR
squid-cachesquidMatch3.0stable10
OR
squid-cachesquidMatch3.0stable11
OR
squid-cachesquidMatch3.0stable12
OR
squid-cachesquidMatch3.0stable13
OR
squid-cachesquidMatch3.0stable14
OR
squid-cachesquidMatch3.0stable15
OR
squid-cachesquidMatch3.0stable2
OR
squid-cachesquidMatch3.0stable3
OR
squid-cachesquidMatch3.0stable4
OR
squid-cachesquidMatch3.0stable5
OR
squid-cachesquidMatch3.0stable6
OR
squid-cachesquidMatch3.0stable7
OR
squid-cachesquidMatch3.0stable8
OR
squid-cachesquidMatch3.0stable9
OR
squid-cachesquidMatch3.0rc1stable11
OR
squid-cachesquidMatch3.0rc4
OR
squid-cachesquidMatch3.0.stable1
OR
squid-cachesquidMatch3.0.stable2
OR
squid-cachesquidMatch3.0.stable3
OR
squid-cachesquidMatch3.0.stable4
OR
squid-cachesquidMatch3.0.stable5
OR
squid-cachesquidMatch3.0.stable6
OR
squid-cachesquidMatch3.0.stable7
OR
squid-cachesquidMatch3.0.stable8
OR
squid-cachesquidMatch3.0.stable9
OR
squid-cachesquidMatch3.0.stable10
OR
squid-cachesquidMatch3.0.stable11
OR
squid-cachesquidMatch3.0.stable11rc1
OR
squid-cachesquidMatch3.0.stable12
OR
squid-cachesquidMatch3.0.stable13
OR
squid-cachesquidMatch3.0.stable14
OR
squid-cachesquidMatch3.0.stable15
OR
squid-cachesquidMatch3.0.stable16
OR
squid-cachesquidMatch3.0.stable16rc1
OR
squid-cachesquidMatch3.0.stable17
OR
squid-cachesquidMatch3.0.stable18
OR
squid-cachesquidMatch3.0.stable19
OR
squid-cachesquidMatch3.0.stable20
OR
squid-cachesquidMatch3.0.stable21
OR
squid-cachesquidMatch3.0.stable22
OR
squid-cachesquidMatch3.0.stable23
OR
squid-cachesquidMatch3.0.stable24
OR
squid-cachesquidMatch3.0.stable25
OR
squid-cachesquidMatch3.1
OR
squid-cachesquidMatch3.1.0.1
OR
squid-cachesquidMatch3.1.0.2
OR
squid-cachesquidMatch3.1.0.3
OR
squid-cachesquidMatch3.1.0.4
OR
squid-cachesquidMatch3.1.0.5
OR
squid-cachesquidMatch3.1.0.6
OR
squid-cachesquidMatch3.1.0.7
OR
squid-cachesquidMatch3.1.0.8
OR
squid-cachesquidMatch3.1.0.9
OR
squid-cachesquidMatch3.1.0.10
OR
squid-cachesquidMatch3.1.0.11
OR
squid-cachesquidMatch3.1.0.12
OR
squid-cachesquidMatch3.1.0.13
OR
squid-cachesquidMatch3.1.0.14
OR
squid-cachesquidMatch3.1.0.15
OR
squid-cachesquidMatch3.1.0.16
OR
squid-cachesquidMatch3.1.0.17
OR
squid-cachesquidMatch3.1.0.18
OR
squid-cachesquidMatch3.1.1
OR
squid-cachesquidMatch3.1.2
OR
squid-cachesquidMatch3.1.3
OR
squid-cachesquidMatch3.1.4
OR
squid-cachesquidMatch3.1.5
OR
squid-cachesquidMatch3.1.5.1
OR
squid-cachesquidMatch3.1.6
OR
squid-cachesquidMatch3.1.7
OR
squid-cachesquidMatch3.1.8
OR
squid-cachesquidMatch3.1.9
OR
squid-cachesquidMatch3.1.10
OR
squid-cachesquidMatch3.1.11
OR
squid-cachesquidMatch3.1.12
OR
squid-cachesquidMatch3.1.13
OR
squid-cachesquidMatch3.1.14

Related

nessus 14
openvas 17
centos 1
veracode 1
ubuntucve 1
redhat 1
nvd 1
debian 1
osv 1
securityvulns 2
fedora 2
prion 1
oraclelinux 1
checkpoint_advisories 1
debiancve 1
cvelist 1
gentoo 1
suse 2
nessus
nessus
RHEL 6 : squid (RHSA-2011:1791)
2011-12-07 00:00:00
Scientific Linux Security Update : squid on SL6.x i386/x86_64
2012-08-01 00:00:00
openSUSE Security Update : squid3 (openSUSE-SU-2012:0213-1)
2014-06-13 00:00:00
openvas
openvas
Squid Proxy Caching Server CNAME Denial of Service Vulnerability
2011-11-01 00:00:00
CentOS Update for squid CESA-2011:1791 centos6
2012-07-30 00:00:00
Debian: Security Advisory (DSA-2381-1)
2012-02-11 00:00:00
centos
centos
squid security update
2011-12-22 15:56:24
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:05:55
ubuntucve
ubuntucve
CVE-2011-4096
2011-11-17 00:00:00
redhat
redhat
(RHSA-2011:1791) Moderate: squid security update
2011-12-06 00:00:00
nvd
nvd
CVE-2011-4096
2011-11-17 19:55:01
debian
debian
[SECURITY] [DSA 2381-1] squid3 security update
2012-01-06 14:28:52
osv
osv
squid3 - invalid memory deallocation
2012-01-06 00:00:00
securityvulns
securityvulns
[ MDVSA-2011:193 ] squid
2012-01-02 00:00:00
squid proxy server buffer overflow
2012-01-02 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: squid-3.1.16-1.fc15
2011-11-17 23:38:53
[SECURITY] Fedora 14 Update: squid-3.1.16-1.fc14
2011-11-17 23:32:07
prion
prion
Memory corruption
2011-11-17 19:55:00
oraclelinux
oraclelinux
squid security update
2011-12-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Squid DNS Replies Invalid Free Code Execution (CVE-2011-4096)
2012-01-12 00:00:00
debiancve
debiancve
CVE-2011-4096
2011-11-17 19:55:00
cvelist
cvelist
CVE-2011-4096
2011-11-17 19:00:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2013-09-27 00:00:00
suse
suse
Security update for squid3 (important)
2016-08-16 18:08:55
Security update for squid3 (important)
2016-08-09 17:12:26

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.1 High

AI Score

Confidence

High

0.935 High

EPSS

Percentile

99.1%

JSON
Related for CVE-2011-4096
nessus14openvas17centos1veracode1ubuntucve1redhat1nvd1debian1osv1securityvulns2fedora2prion1oraclelinux1checkpoint_advisories1debiancve1cvelist1gentoo1suse2