1. Home
  2. Vulnerabilities
  3. CVE-2014-6270

CVE-2014-6270

CVSS v2.0 6.8 (Medium)
68% Progress
EPSS 9.88 % (95th)
9.88% Progress
Affected Products 2
Advisories 9
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

Weaknesses
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2014-09-12 14:55:07
(10 years ago)
Updated Date
2017-09-08 01:29:13
(7 years ago)

Affected Products

Oracle

Squid-cache

Configuration #1

    CPE23 From Up To
  Squid-cache Squid 2.4.stable1 cpe:2.3:a:squid-cache:squid:2.4.stable1
  Squid-cache Squid 2.4.stable2 cpe:2.3:a:squid-cache:squid:2.4.stable2
  Squid-cache Squid 2.4.stable3 cpe:2.3:a:squid-cache:squid:2.4.stable3
  Squid-cache Squid 2.4.stable4 cpe:2.3:a:squid-cache:squid:2.4.stable4
  Squid-cache Squid 2.4.stable5 cpe:2.3:a:squid-cache:squid:2.4.stable5
  Squid-cache Squid 2.4.stable6 cpe:2.3:a:squid-cache:squid:2.4.stable6
  Squid-cache Squid 2.4.stable7 cpe:2.3:a:squid-cache:squid:2.4.stable7
  Squid-cache Squid 2.5.stable1 cpe:2.3:a:squid-cache:squid:2.5.stable1
  Squid-cache Squid 2.5.stable2 cpe:2.3:a:squid-cache:squid:2.5.stable2
  Squid-cache Squid 2.5.stable3 cpe:2.3:a:squid-cache:squid:2.5.stable3
  Squid-cache Squid 2.5.stable4 cpe:2.3:a:squid-cache:squid:2.5.stable4
  Squid-cache Squid 2.5.stable5 cpe:2.3:a:squid-cache:squid:2.5.stable5
  Squid-cache Squid 2.5.stable6 cpe:2.3:a:squid-cache:squid:2.5.stable6
  Squid-cache Squid 2.5.stable7 cpe:2.3:a:squid-cache:squid:2.5.stable7
  Squid-cache Squid 2.5.stable8 cpe:2.3:a:squid-cache:squid:2.5.stable8
  Squid-cache Squid 2.5.stable9 cpe:2.3:a:squid-cache:squid:2.5.stable9
  Squid-cache Squid 2.5.stable10 cpe:2.3:a:squid-cache:squid:2.5.stable10
  Squid-cache Squid 2.5.stable11 cpe:2.3:a:squid-cache:squid:2.5.stable11
  Squid-cache Squid 2.5.stable12 cpe:2.3:a:squid-cache:squid:2.5.stable12
  Squid-cache Squid 2.5.stable13 cpe:2.3:a:squid-cache:squid:2.5.stable13
  Squid-cache Squid 2.5.stable14 cpe:2.3:a:squid-cache:squid:2.5.stable14
  Squid-cache Squid 2.6.stable1 cpe:2.3:a:squid-cache:squid:2.6.stable1
  Squid-cache Squid 2.6.stable2 cpe:2.3:a:squid-cache:squid:2.6.stable2
  Squid-cache Squid 2.6.stable3 cpe:2.3:a:squid-cache:squid:2.6.stable3
  Squid-cache Squid 2.6.stable4 cpe:2.3:a:squid-cache:squid:2.6.stable4
  Squid-cache Squid 2.6.stable5 cpe:2.3:a:squid-cache:squid:2.6.stable5
  Squid-cache Squid 2.6.stable6 cpe:2.3:a:squid-cache:squid:2.6.stable6
  Squid-cache Squid 2.6.stable7 cpe:2.3:a:squid-cache:squid:2.6.stable7
  Squid-cache Squid 2.6.stable8 cpe:2.3:a:squid-cache:squid:2.6.stable8
  Squid-cache Squid 2.6.stable9 cpe:2.3:a:squid-cache:squid:2.6.stable9
  Squid-cache Squid 2.6.stable10 cpe:2.3:a:squid-cache:squid:2.6.stable10
  Squid-cache Squid 2.6.stable11 cpe:2.3:a:squid-cache:squid:2.6.stable11
  Squid-cache Squid 2.6.stable12 cpe:2.3:a:squid-cache:squid:2.6.stable12
  Squid-cache Squid 2.6.stable13 cpe:2.3:a:squid-cache:squid:2.6.stable13
  Squid-cache Squid 2.6.stable14 cpe:2.3:a:squid-cache:squid:2.6.stable14
  Squid-cache Squid 2.6.stable15 cpe:2.3:a:squid-cache:squid:2.6.stable15
  Squid-cache Squid 2.6.stable16 cpe:2.3:a:squid-cache:squid:2.6.stable16
  Squid-cache Squid 2.6.stable17 cpe:2.3:a:squid-cache:squid:2.6.stable17
  Squid-cache Squid 2.6.stable18 cpe:2.3:a:squid-cache:squid:2.6.stable18
  Squid-cache Squid 2.6.stable19 cpe:2.3:a:squid-cache:squid:2.6.stable19
  Squid-cache Squid 2.6.stable20 cpe:2.3:a:squid-cache:squid:2.6.stable20
  Squid-cache Squid 2.6.stable21 cpe:2.3:a:squid-cache:squid:2.6.stable21
  Squid-cache Squid 2.6.stable22 cpe:2.3:a:squid-cache:squid:2.6.stable22
  Squid-cache Squid 2.6.stable23 cpe:2.3:a:squid-cache:squid:2.6.stable23
  Squid-cache Squid 2.7.stable1 cpe:2.3:a:squid-cache:squid:2.7.stable1
  Squid-cache Squid 2.7.stable2 cpe:2.3:a:squid-cache:squid:2.7.stable2
  Squid-cache Squid 2.7.stable3 cpe:2.3:a:squid-cache:squid:2.7.stable3
  Squid-cache Squid 2.7.stable4 cpe:2.3:a:squid-cache:squid:2.7.stable4
  Squid-cache Squid 2.7.stable5 cpe:2.3:a:squid-cache:squid:2.7.stable5
  Squid-cache Squid 2.7.stable6 cpe:2.3:a:squid-cache:squid:2.7.stable6
  Squid-cache Squid 2.7.stable7 cpe:2.3:a:squid-cache:squid:2.7.stable7
  Squid-cache Squid 2.7.stable8 cpe:2.3:a:squid-cache:squid:2.7.stable8
  Squid-cache Squid 2.7.stable9 cpe:2.3:a:squid-cache:squid:2.7.stable9
  Squid-cache Squid 3.0 cpe:2.3:a:squid-cache:squid:3.0
  Squid-cache Squid 3.0 Pre1 Edition cpe:2.3:a:squid-cache:squid:3.0:-:pre1
  Squid-cache Squid 3.0 Pre2 Edition cpe:2.3:a:squid-cache:squid:3.0:-:pre2
  Squid-cache Squid 3.0 Pre3 Edition cpe:2.3:a:squid-cache:squid:3.0:-:pre3
  Squid-cache Squid 3.0 Pre4 Edition cpe:2.3:a:squid-cache:squid:3.0:-:pre4
  Squid-cache Squid 3.0 Pre5 Edition cpe:2.3:a:squid-cache:squid:3.0:-:pre5
  Squid-cache Squid 3.0 Pre6 Edition cpe:2.3:a:squid-cache:squid:3.0:-:pre6
  Squid-cache Squid 3.0 Pre7 Edition cpe:2.3:a:squid-cache:squid:3.0:-:pre7
  Squid-cache Squid 3.0 Rc4 cpe:2.3:a:squid-cache:squid:3.0:rc4
  Squid-cache Squid 3.0.stable1 cpe:2.3:a:squid-cache:squid:3.0.stable1
  Squid-cache Squid 3.0.stable2 cpe:2.3:a:squid-cache:squid:3.0.stable2
  Squid-cache Squid 3.0.stable3 cpe:2.3:a:squid-cache:squid:3.0.stable3
  Squid-cache Squid 3.0.stable4 cpe:2.3:a:squid-cache:squid:3.0.stable4
  Squid-cache Squid 3.0.stable5 cpe:2.3:a:squid-cache:squid:3.0.stable5
  Squid-cache Squid 3.0.stable6 cpe:2.3:a:squid-cache:squid:3.0.stable6
  Squid-cache Squid 3.0.stable7 cpe:2.3:a:squid-cache:squid:3.0.stable7
  Squid-cache Squid 3.0.stable8 cpe:2.3:a:squid-cache:squid:3.0.stable8
  Squid-cache Squid 3.0.stable9 cpe:2.3:a:squid-cache:squid:3.0.stable9
  Squid-cache Squid 3.0.stable10 cpe:2.3:a:squid-cache:squid:3.0.stable10
  Squid-cache Squid 3.0.stable11 cpe:2.3:a:squid-cache:squid:3.0.stable11
  Squid-cache Squid 3.0.stable11 Rc1 cpe:2.3:a:squid-cache:squid:3.0.stable11:rc1
  Squid-cache Squid 3.0.stable12 cpe:2.3:a:squid-cache:squid:3.0.stable12
  Squid-cache Squid 3.0.stable13 cpe:2.3:a:squid-cache:squid:3.0.stable13
  Squid-cache Squid 3.0.stable14 cpe:2.3:a:squid-cache:squid:3.0.stable14
  Squid-cache Squid 3.0.stable15 cpe:2.3:a:squid-cache:squid:3.0.stable15
  Squid-cache Squid 3.0.stable16 cpe:2.3:a:squid-cache:squid:3.0.stable16
  Squid-cache Squid 3.0.stable16 Rc1 cpe:2.3:a:squid-cache:squid:3.0.stable16:rc1
  Squid-cache Squid 3.0.stable17 cpe:2.3:a:squid-cache:squid:3.0.stable17
  Squid-cache Squid 3.0.stable18 cpe:2.3:a:squid-cache:squid:3.0.stable18
  Squid-cache Squid 3.0.stable19 cpe:2.3:a:squid-cache:squid:3.0.stable19
  Squid-cache Squid 3.0.stable20 cpe:2.3:a:squid-cache:squid:3.0.stable20
  Squid-cache Squid 3.0.stable21 cpe:2.3:a:squid-cache:squid:3.0.stable21
  Squid-cache Squid 3.0.stable22 cpe:2.3:a:squid-cache:squid:3.0.stable22
  Squid-cache Squid 3.0.stable23 cpe:2.3:a:squid-cache:squid:3.0.stable23
  Squid-cache Squid 3.0.stable24 cpe:2.3:a:squid-cache:squid:3.0.stable24
  Squid-cache Squid 3.0.stable25 cpe:2.3:a:squid-cache:squid:3.0.stable25
  Squid-cache Squid 3.1 cpe:2.3:a:squid-cache:squid:3.1
  Squid-cache Squid 3.1.0.1 cpe:2.3:a:squid-cache:squid:3.1.0.1
  Squid-cache Squid 3.1.0.2 cpe:2.3:a:squid-cache:squid:3.1.0.2
  Squid-cache Squid 3.1.0.3 cpe:2.3:a:squid-cache:squid:3.1.0.3
  Squid-cache Squid 3.1.0.4 cpe:2.3:a:squid-cache:squid:3.1.0.4
  Squid-cache Squid 3.1.0.5 cpe:2.3:a:squid-cache:squid:3.1.0.5
  Squid-cache Squid 3.1.0.6 cpe:2.3:a:squid-cache:squid:3.1.0.6
  Squid-cache Squid 3.1.0.7 cpe:2.3:a:squid-cache:squid:3.1.0.7
  Squid-cache Squid 3.1.0.8 cpe:2.3:a:squid-cache:squid:3.1.0.8
  Squid-cache Squid 3.1.0.9 cpe:2.3:a:squid-cache:squid:3.1.0.9
  Squid-cache Squid 3.1.0.10 cpe:2.3:a:squid-cache:squid:3.1.0.10
  Squid-cache Squid 3.1.0.11 cpe:2.3:a:squid-cache:squid:3.1.0.11
  Squid-cache Squid 3.1.0.12 cpe:2.3:a:squid-cache:squid:3.1.0.12
  Squid-cache Squid 3.1.0.13 cpe:2.3:a:squid-cache:squid:3.1.0.13
  Squid-cache Squid 3.1.0.14 cpe:2.3:a:squid-cache:squid:3.1.0.14
  Squid-cache Squid 3.1.0.15 cpe:2.3:a:squid-cache:squid:3.1.0.15
  Squid-cache Squid 3.1.0.16 cpe:2.3:a:squid-cache:squid:3.1.0.16
  Squid-cache Squid 3.1.0.17 cpe:2.3:a:squid-cache:squid:3.1.0.17
  Squid-cache Squid 3.1.0.18 cpe:2.3:a:squid-cache:squid:3.1.0.18
  Squid-cache Squid 3.1.1 cpe:2.3:a:squid-cache:squid:3.1.1
  Squid-cache Squid 3.1.2 cpe:2.3:a:squid-cache:squid:3.1.2
  Squid-cache Squid 3.1.3 cpe:2.3:a:squid-cache:squid:3.1.3
  Squid-cache Squid 3.1.4 cpe:2.3:a:squid-cache:squid:3.1.4
  Squid-cache Squid 3.1.5 cpe:2.3:a:squid-cache:squid:3.1.5
  Squid-cache Squid 3.1.5.1 cpe:2.3:a:squid-cache:squid:3.1.5.1
  Squid-cache Squid 3.1.6 cpe:2.3:a:squid-cache:squid:3.1.6
  Squid-cache Squid 3.1.7 cpe:2.3:a:squid-cache:squid:3.1.7
  Squid-cache Squid 3.1.8 cpe:2.3:a:squid-cache:squid:3.1.8
  Squid-cache Squid 3.1.9 cpe:2.3:a:squid-cache:squid:3.1.9
  Squid-cache Squid 3.1.10 cpe:2.3:a:squid-cache:squid:3.1.10
  Squid-cache Squid 3.1.11 cpe:2.3:a:squid-cache:squid:3.1.11
  Squid-cache Squid 3.1.12 cpe:2.3:a:squid-cache:squid:3.1.12
  Squid-cache Squid 3.1.13 cpe:2.3:a:squid-cache:squid:3.1.13
  Squid-cache Squid 3.1.14 cpe:2.3:a:squid-cache:squid:3.1.14
  Squid-cache Squid 3.1.15 cpe:2.3:a:squid-cache:squid:3.1.15
  Squid-cache Squid 3.2.0.1 cpe:2.3:a:squid-cache:squid:3.2.0.1
  Squid-cache Squid 3.2.0.2 cpe:2.3:a:squid-cache:squid:3.2.0.2
  Squid-cache Squid 3.2.0.3 cpe:2.3:a:squid-cache:squid:3.2.0.3
  Squid-cache Squid 3.2.0.4 cpe:2.3:a:squid-cache:squid:3.2.0.4
  Squid-cache Squid 3.2.0.5 cpe:2.3:a:squid-cache:squid:3.2.0.5
  Squid-cache Squid 3.2.0.6 cpe:2.3:a:squid-cache:squid:3.2.0.6
  Squid-cache Squid 3.2.0.7 cpe:2.3:a:squid-cache:squid:3.2.0.7
  Squid-cache Squid 3.2.0.8 cpe:2.3:a:squid-cache:squid:3.2.0.8
  Squid-cache Squid 3.2.0.9 cpe:2.3:a:squid-cache:squid:3.2.0.9
  Squid-cache Squid 3.2.0.10 cpe:2.3:a:squid-cache:squid:3.2.0.10
  Squid-cache Squid 3.2.0.11 cpe:2.3:a:squid-cache:squid:3.2.0.11
  Squid-cache Squid 3.2.0.12 cpe:2.3:a:squid-cache:squid:3.2.0.12
  Squid-cache Squid 3.2.0.13 cpe:2.3:a:squid-cache:squid:3.2.0.13
  Squid-cache Squid 3.2.0.14 cpe:2.3:a:squid-cache:squid:3.2.0.14
  Squid-cache Squid 3.2.0.15 cpe:2.3:a:squid-cache:squid:3.2.0.15
  Squid-cache Squid 3.2.0.16 cpe:2.3:a:squid-cache:squid:3.2.0.16
  Squid-cache Squid 3.2.0.17 cpe:2.3:a:squid-cache:squid:3.2.0.17
  Squid-cache Squid 3.2.0.18 cpe:2.3:a:squid-cache:squid:3.2.0.18
  Squid-cache Squid 3.2.0.19 cpe:2.3:a:squid-cache:squid:3.2.0.19
  Squid-cache Squid 3.2.1 cpe:2.3:a:squid-cache:squid:3.2.1
  Squid-cache Squid 3.2.2 cpe:2.3:a:squid-cache:squid:3.2.2
  Squid-cache Squid 3.2.3 cpe:2.3:a:squid-cache:squid:3.2.3
  Squid-cache Squid 3.2.4 cpe:2.3:a:squid-cache:squid:3.2.4
  Squid-cache Squid 3.2.5 cpe:2.3:a:squid-cache:squid:3.2.5
  Squid-cache Squid 3.2.6 cpe:2.3:a:squid-cache:squid:3.2.6
  Squid-cache Squid 3.2.7 cpe:2.3:a:squid-cache:squid:3.2.7
  Squid-cache Squid 3.2.8 cpe:2.3:a:squid-cache:squid:3.2.8
  Squid-cache Squid 3.2.9 cpe:2.3:a:squid-cache:squid:3.2.9
  Squid-cache Squid 3.2.10 cpe:2.3:a:squid-cache:squid:3.2.10
  Squid-cache Squid 3.2.11 cpe:2.3:a:squid-cache:squid:3.2.11
  Squid-cache Squid 3.2.12 cpe:2.3:a:squid-cache:squid:3.2.12
  Squid-cache Squid 3.3.0 cpe:2.3:a:squid-cache:squid:3.3.0
  Squid-cache Squid 3.3.0.2 cpe:2.3:a:squid-cache:squid:3.3.0.2
  Squid-cache Squid 3.3.0.3 cpe:2.3:a:squid-cache:squid:3.3.0.3
  Squid-cache Squid 3.3.1 cpe:2.3:a:squid-cache:squid:3.3.1
  Squid-cache Squid 3.3.2 cpe:2.3:a:squid-cache:squid:3.3.2
  Squid-cache Squid 3.3.3 cpe:2.3:a:squid-cache:squid:3.3.3
  Squid-cache Squid 3.3.4 cpe:2.3:a:squid-cache:squid:3.3.4
  Squid-cache Squid 3.3.5 cpe:2.3:a:squid-cache:squid:3.3.5
  Squid-cache Squid 3.3.6 cpe:2.3:a:squid-cache:squid:3.3.6
  Squid-cache Squid 3.3.7 cpe:2.3:a:squid-cache:squid:3.3.7
  Squid-cache Squid 3.3.8 cpe:2.3:a:squid-cache:squid:3.3.8
  Squid-cache Squid 3.3.9 cpe:2.3:a:squid-cache:squid:3.3.9
  Squid-cache Squid 3.3.10 cpe:2.3:a:squid-cache:squid:3.3.10
  Squid-cache Squid 3.3.11 cpe:2.3:a:squid-cache:squid:3.3.11
  Squid-cache Squid 3.3.12 cpe:2.3:a:squid-cache:squid:3.3.12
  Squid-cache Squid 3.4.0.1 cpe:2.3:a:squid-cache:squid:3.4.0.1
  Squid-cache Squid 3.4.0.2 cpe:2.3:a:squid-cache:squid:3.4.0.2
  Squid-cache Squid 3.4.0.3 cpe:2.3:a:squid-cache:squid:3.4.0.3
  Squid-cache Squid 3.4.1 cpe:2.3:a:squid-cache:squid:3.4.1
  Squid-cache Squid 3.4.2 cpe:2.3:a:squid-cache:squid:3.4.2
  Squid-cache Squid 3.4.3 cpe:2.3:a:squid-cache:squid:3.4.3
  Squid-cache Squid 3.4.4 cpe:2.3:a:squid-cache:squid:3.4.4
  Squid-cache Squid 3.4.5 cpe:2.3:a:squid-cache:squid:3.4.5
  Squid-cache Squid 3.4.6 cpe:2.3:a:squid-cache:squid:3.4.6
  Squid-cache Squid 3.4.7 cpe:2.3:a:squid-cache:squid:3.4.7

Configuration #2

    CPE23 From Up To
  Oracle Solaris 11.2 cpe:2.3:o:oracle:solaris:11.2