Test Kennung:	1.3.6.1.4.1.25623.1.0.806105
Kategorie:	Web Servers
Titel:	Squid Pinger ICMP Processing Multiple Vulnerabilities (SQUID-2014:3, SQUID-2014:4)
Zusammenfassung:	Squid is prone to pinger ICMP processing multiple vulnerabilities.
Beschreibung:	Summary: Squid is prone to pinger ICMP processing multiple vulnerabilities. Vulnerability Insight: - Due to incorrect bounds checking Squid pinger binary is vulnerable to denial of service or information leak attack when processing larger than normal ICMP or ICMPv6 packets. - Due to incorrect input validation Squid pinger binary is vulnerable to denial of service or information leak attacks when processing ICMP or ICMPv6 packets. - Due to incorrect buffer management Squid can be caused by an attacker to write outside its allocated SNMP buffer. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information or cause a denial of service (crash). Affected Software/OS: Squid versions 3.x through 3.4.7. Solution: Update to version 3.4.8 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-7141 BugTraq ID: 69688 http://www.securityfocus.com/bid/69688 http://seclists.org/oss-sec/2014/q3/539 http://seclists.org/oss-sec/2014/q3/612 http://seclists.org/oss-sec/2014/q3/626 http://secunia.com/advisories/60242 SuSE Security Announcement: SUSE-SU-2016:1996 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html SuSE Security Announcement: SUSE-SU-2016:2089 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html http://ubuntu.com/usn/usn-2422-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-7142 BugTraq ID: 70022 http://www.securityfocus.com/bid/70022 http://seclists.org/oss-sec/2014/q3/613 Common Vulnerability Exposure (CVE) ID: CVE-2014-6270 BugTraq ID: 69686 http://www.securityfocus.com/bid/69686 https://security.gentoo.org/glsa/201607-01 http://seclists.org/oss-sec/2014/q3/542 http://seclists.org/oss-sec/2014/q3/550 http://www.ubuntu.com/usn/USN-2921-1 XForce ISS Database: squid-cve20146270-bo(95873) https://exchange.xforce.ibmcloud.com/vulnerabilities/95873
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.