ID de Prueba:	1.3.6.1.4.1.25623.1.0.806105
Categoría:	Web Servers
Título:	Squid Pinger ICMP Processing Multiple Vulnerabilities (SQUID-2014:3, SQUID-2014:4)
Resumen:	Squid is prone to pinger ICMP processing multiple vulnerabilities.
Descripción:	Summary: Squid is prone to pinger ICMP processing multiple vulnerabilities. Vulnerability Insight: - Due to incorrect bounds checking Squid pinger binary is vulnerable to denial of service or information leak attack when processing larger than normal ICMP or ICMPv6 packets. - Due to incorrect input validation Squid pinger binary is vulnerable to denial of service or information leak attacks when processing ICMP or ICMPv6 packets. - Due to incorrect buffer management Squid can be caused by an attacker to write outside its allocated SNMP buffer. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information or cause a denial of service (crash). Affected Software/OS: Squid versions 3.x through 3.4.7. Solution: Update to version 3.4.8 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-7141 BugTraq ID: 69688 http://www.securityfocus.com/bid/69688 http://seclists.org/oss-sec/2014/q3/539 http://seclists.org/oss-sec/2014/q3/612 http://seclists.org/oss-sec/2014/q3/626 http://secunia.com/advisories/60242 SuSE Security Announcement: SUSE-SU-2016:1996 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html SuSE Security Announcement: SUSE-SU-2016:2089 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html http://ubuntu.com/usn/usn-2422-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-7142 BugTraq ID: 70022 http://www.securityfocus.com/bid/70022 http://seclists.org/oss-sec/2014/q3/613 Common Vulnerability Exposure (CVE) ID: CVE-2014-6270 BugTraq ID: 69686 http://www.securityfocus.com/bid/69686 https://security.gentoo.org/glsa/201607-01 http://seclists.org/oss-sec/2014/q3/542 http://seclists.org/oss-sec/2014/q3/550 http://www.ubuntu.com/usn/USN-2921-1 XForce ISS Database: squid-cve20146270-bo(95873) https://exchange.xforce.ibmcloud.com/vulnerabilities/95873
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.