The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openpkg | Openpkg | 2.1 (including) | 2.1 (including) |
| Openpkg | Openpkg | 2.2 (including) | 2.2 (including) |
| Openpkg | Openpkg | current (including) | current (including) |
| Squid | Squid | 2.0_patch2 (including) | 2.0_patch2 (including) |
| Squid | Squid | 2.1_patch2 (including) | 2.1_patch2 (including) |
| Squid | Squid | 2.3_.stable4 (including) | 2.3_.stable4 (including) |
| Squid | Squid | 2.3_.stable5 (including) | 2.3_.stable5 (including) |
| Squid | Squid | 2.4 (including) | 2.4 (including) |
| Squid | Squid | 2.4_.stable2 (including) | 2.4_.stable2 (including) |
| Squid | Squid | 2.4_.stable6 (including) | 2.4_.stable6 (including) |
| Squid | Squid | 2.4_.stable7 (including) | 2.4_.stable7 (including) |
| Squid | Squid | 2.5_.stable1 (including) | 2.5_.stable1 (including) |
| Squid | Squid | 2.5_.stable3 (including) | 2.5_.stable3 (including) |
| Squid | Squid | 2.5_.stable4 (including) | 2.5_.stable4 (including) |
| Squid | Squid | 2.5_.stable5 (including) | 2.5_.stable5 (including) |
| Squid | Squid | 2.5_.stable6 (including) | 2.5_.stable6 (including) |
| Squid | Squid | 3.0_pre1 (including) | 3.0_pre1 (including) |
| Squid | Squid | 3.0_pre2 (including) | 3.0_pre2 (including) |
| Squid | Squid | 3.0_pre3 (including) | 3.0_pre3 (including) |
| Red Hat Enterprise Linux 3 | RedHat | squid-7:2.5.STABLE3-6.3E.2 | * |
| Squid | Ubuntu | dapper | * |
| Squid | Ubuntu | devel | * |
| Squid | Ubuntu | edgy | * |
| Squid | Ubuntu | feisty | * |