Skip to content
OpenAdvisories
Unscored USN-2921-1 2 CVEs

squid3 vulnerabilities

Published Mar 7, 2016 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Sebastian Krahmer discovered that Squid incorrectly handled certain SNMP
requests. If SNMP is enabled, a remote attacker could use this issue to
cause Squid to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2014-6270)

Alex Rousskov discovered that Squid incorrectly handled certain malformed
responses. A remote attacker could possibly use this issue to cause Squid
to crash, resulting in a denial of service. (CVE-2016-2571)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS squid3 3.3.8-1ubuntu6.6

Vulnerabilities 2

  • Unscored —
    CVE-2014-6270 EPSS 23%

    Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, a…

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2016-2571

    http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-pars…

    squid3 Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-6270
  • report
    https://ubuntu.com/security/CVE-2016-2571