Squid Proxy Caching Server CNAME Denial of Service Vulnerability

Bugtraq ID:	50449
Class:	Design Error
CVE:	CVE-2011-4096
Remote:	Yes
Local:	No
Published:	Oct 31 2011 12:00AM
Updated:	Apr 13 2015 10:25PM
Credit:	<br>Jan iankko Lieskovsky
Vulnerable:	Squid Web Proxy Cache 3.1.16 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Squid Proxy Caching Server CNAME Denial of Service Vulnerability

Squid proxy caching server is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users.

Squid Proxy Caching Server CNAME Denial of Service Vulnerability

An attacker can use readily available tools to exploit this issue.

Squid Proxy Caching Server CNAME Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2011 x86_64

• Mandriva squid-3.1.15-1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.1.15-1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011

• Mandriva squid-3.1.15-1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.1.15-1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/

Squid Proxy Caching Server CNAME Denial of Service Vulnerability

References:

• Bug 3237 - seq fault in free() from rfc1035RRDestroy at rfc1035.c:488 (Bugzilla)
  
• Bug 750316 - squid: Invalid free by processing CNAME DNS record pointing to anot (Red Hat)
  
• CVE Request -- Squid v3.1.16 -- Invalid free by processing CNAME DNS record poin (Jan iankko Lieskovsky)