REDHAT-BUG-1139967: Buffer Overflow
Sebastian Krahmer discovered an off-by-one error, leading to a heap-based buffer overflow flaw, in the way Squid handled UDP SNMP requests. An unauthenticated, remote attacker could possibly use this flaw to crash Squid or, potentially, execute arbitrary code.
As noted in Sebastian's original report, an SNMP port must be configured. The default configuration of Squid for Red Hat Enterprise Linux 6 and 7 does not include an snmpport declaration (http://wiki.squid-cache.org/Features/Snmp).
Patch:
http://bugzillafiles.novell.org/attachment.cgi?id=605545
References:
https://bugzilla.novell.com/showbug.cgi?id=895773 http://seclists.org/oss-sec/2014/q3/542
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1139967?
The severity of REDHAT-BUG-1139967 is high due to the potential for a heap-based buffer overflow that could allow an attacker to crash Squid or execute arbitrary code.
How do I fix REDHAT-BUG-1139967?
To fix REDHAT-BUG-1139967, it is recommended to update Squid to the latest patched version that addresses the vulnerability.
What does the REDHAT-BUG-1139967 vulnerability affect?
REDHAT-BUG-1139967 affects the Squid Web Proxy Cache software specifically in how it handles UDP SNMP requests.
Can REDHAT-BUG-1139967 be exploited remotely?
Yes, REDHAT-BUG-1139967 can be exploited by an unauthenticated remote attacker.
What type of flaw is associated with REDHAT-BUG-1139967?
REDHAT-BUG-1139967 is associated with an off-by-one error that leads to a heap-based buffer overflow.