CVE-2011-4096

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:pre1:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:pre2:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:pre3:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:pre4:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:pre5:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:pre6:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:pre7:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable1:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable10:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable11:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable12:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable13:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable14:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable15:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable2:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable3:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable4:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable5:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable6:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable7:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable8:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:*:stable9:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:rc1:stable11:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0:rc4:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable1:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable2:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable5:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable6:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable7:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable8:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable9:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable10:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable11:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable11:rc1:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable12:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable13:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable14:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable15:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable16:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable16:rc1:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable17:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable18:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable19:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable20:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable21:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable22:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable23:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable24:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.0.stable25:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*
cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*

History

21 Nov 2024, 01:31

Type Values Removed Values Added
References () http://bugs.squid-cache.org/show_bug.cgi?id=3237#c12 - () http://bugs.squid-cache.org/show_bug.cgi?id=3237#c12 -
References () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html -
References () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html -
References () http://secunia.com/advisories/46609 - Vendor Advisory () http://secunia.com/advisories/46609 - Vendor Advisory
References () http://secunia.com/advisories/47459 - () http://secunia.com/advisories/47459 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:193 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:193 -
References () http://www.openwall.com/lists/oss-security/2011/10/31/5 - () http://www.openwall.com/lists/oss-security/2011/10/31/5 -
References () http://www.openwall.com/lists/oss-security/2011/11/01/3 - () http://www.openwall.com/lists/oss-security/2011/11/01/3 -
References () http://www.redhat.com/support/errata/RHSA-2011-1791.html - () http://www.redhat.com/support/errata/RHSA-2011-1791.html -
References () http://www.securitytracker.com/id?1026265 - () http://www.securitytracker.com/id?1026265 -
References () http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID_3_1_16.html - () http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID_3_1_16.html -

Information

Published : 2011-11-17 19:55

Updated : 2024-11-21 01:31


NVD link : CVE-2011-4096

Mitre link : CVE-2011-4096

CVE.ORG link : CVE-2011-4096


JSON object : View

Products Affected

squid-cache

  • squid
CWE
CWE-399

Resource Management Errors