Squid CVE-2014-0128 Remote Denial of Service Vulnerability

Bugtraq ID:	66112
Class:	Design Error
CVE:	CVE-2014-0128
Remote:	Yes
Local:	No
Published:	Mar 11 2014 12:00AM
Updated:	Nov 03 2015 08:04PM
Credit:	Mathias Fischer and Fabian Hugelshofer of Open Systems AG
Vulnerable:	Squid Squid 3.3.8 Squid Squid 3.3.5 Squid Squid 3.2.13 Squid Squid 3.2.7 Squid Squid 3.2.5 Squid Squid 3.2.4 Squid Squid 3.2.3 Squid Squid 3.4.3 Squid Squid 3.4 Squid Squid 3.3.7 Squid Squid 3.3.6 Squid Squid 3.3.11 Squid Squid 3.3.0.2 Squid Squid 3.3.0.1 Squid Squid 3.3 Squid Squid 3.2.12 Squid Squid 3.2.11 Squid Squid 3.2 Squid Squid 3.1.22 Squid Squid 3.1.21 S.u.S.E. openSUSE 11.4 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Oracle Solaris 11.2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Gentoo Linux CentOS CentOS 6 AlienVault AlienVault 5.0.4 AlienVault AlienVault 5.1 AlienVault AlienVault 5.0 AlienVault AlienVault 4.15.2 AlienVault AlienVault 4.15.1 AlienVault AlienVault 4.15 AlienVault AlienVault 4.14 AlienVault AlienVault 4.13 AlienVault AlienVault 4.12.1 AlienVault AlienVault 4.12
Not Vulnerable:	Squid Squid 3.4.4 Squid Squid 3.3.12 AlienVault AlienVault 5.2

Squid CVE-2014-0128 Remote Denial of Service Vulnerability

Squid is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions.

Versions prior to Squid 3.3.12 and 3.4.4 are vulnerable.

Squid CVE-2014-0128 Remote Denial of Service Vulnerability

References:

• Squid Homepage (Squid)
  
• Squid Proxy Cache Security Update Advisory SQUID-2014:1 (Squid)
  
• Oracle Solaris Third Party Bulletin - July 2015 (Oracle)
  
• Security Advisory - AlienVault v5.2 addresses 55 vulnerabilities (AlienVault)