CVE-2013-4115: Buffer Overflow
Buffer overflow in the idnsALookup function in dnsinternal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4115?
CVE-2013-4115 has a high severity level due to its potential to cause denial of service through memory corruption.
How do I fix CVE-2013-4115?
To fix CVE-2013-4115, upgrade your Squid installation to version 3.2.11 or 3.3.7 or later.
What systems are affected by CVE-2013-4115?
CVE-2013-4115 affects Squid versions 3.2 through 3.2.11 and 3.3 through 3.3.6, along with some versions of openSUSE.
What type of vulnerability is CVE-2013-4115?
CVE-2013-4115 is a buffer overflow vulnerability that can be exploited through malicious DNS lookup requests.
Can CVE-2013-4115 lead to remote attacks?
Yes, CVE-2013-4115 can be exploited by remote attackers to disrupt service and cause crashes.