UBUNTU-CVE-2014-6270

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2014-6270
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-6270.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2014-6270
Related
Published
2014-09-12T00:00:00Z
Modified
2014-09-12T00:00:00Z
Summary
[none]
Details

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

References

Affected packages

Ubuntu:14.04:LTS / squid3

Package

Name
squid3
Purl
pkg:deb/ubuntu/squid3?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.3.8-1ubuntu6.6

Affected versions

3.*

3.3.8-1ubuntu3
3.3.8-1ubuntu4
3.3.8-1ubuntu5
3.3.8-1ubuntu6
3.3.8-1ubuntu6.1
3.3.8-1ubuntu6.2
3.3.8-1ubuntu6.3
3.3.8-1ubuntu6.4

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid-cgi"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid-cgi-dbgsym"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid-dbgsym"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid-purge"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid-purge-dbgsym"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid3"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid3-common"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid3-dbg"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squid3-dbgsym"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squidclient"
        },
        {
            "binary_version": "3.3.8-1ubuntu6.6",
            "binary_name": "squidclient-dbgsym"
        }
    ]
}