CVE-2014-7142
Gentoo Linux Security Advisory 201411-11
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
El módulo pinger en Squid 3.x anterior a 3.4.8 permite a atacantes remotos obtener información sensible o causar una denegación de servicio (caída) a través de un tamaño de paquete (1) ICMP o (2) ICMP6 manipulado.
Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled. Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a denial of service. Due to incorrect buffer management Squid can be caused by an attacker to write outside its allocated SNMP buffer. Due to incorrect bounds checking Squid pinger binary is vulnerable to denial of service or information leak attack when processing larger than normal ICMP or ICMPv6 packets. Due to incorrect input validation Squid pinger binary is vulnerable to denial of service or information leak attacks when processing ICMP or ICMPv6 packets.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-09-22 CVE Reserved
- 2014-11-26 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/oss-sec/2014/q3/539 | Mailing List |
|
| http://seclists.org/oss-sec/2014/q3/613 | Mailing List |
|
| http://seclists.org/oss-sec/2014/q3/626 | Mailing List |
|
| http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html | Third Party Advisory |
|
| http://www.securityfocus.com/bid/70022 | Vdb Entry | |
| https://bugzilla.novell.com/show_bug.cgi?id=891268 | Issue Tracking |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html | 2016-11-28 | |
| http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html | 2016-11-28 | |
| http://ubuntu.com/usn/usn-2422-1 | 2016-11-28 | |
| http://www.squid-cache.org/Advisories/SQUID-2014_4.txt | 2016-11-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Oracle Search vendor "Oracle" | Solaris Search vendor "Oracle" for product "Solaris" | 11.2 Search vendor "Oracle" for product "Solaris" and version "11.2" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 14.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.2 Search vendor "Squid-cache" for product "Squid" and version "3.1.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.3 Search vendor "Squid-cache" for product "Squid" and version "3.1.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.4 Search vendor "Squid-cache" for product "Squid" and version "3.1.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.5 Search vendor "Squid-cache" for product "Squid" and version "3.1.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.5.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.5.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.6 Search vendor "Squid-cache" for product "Squid" and version "3.1.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.7 Search vendor "Squid-cache" for product "Squid" and version "3.1.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.8 Search vendor "Squid-cache" for product "Squid" and version "3.1.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.9 Search vendor "Squid-cache" for product "Squid" and version "3.1.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.10 Search vendor "Squid-cache" for product "Squid" and version "3.1.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.11 Search vendor "Squid-cache" for product "Squid" and version "3.1.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.12 Search vendor "Squid-cache" for product "Squid" and version "3.1.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.13 Search vendor "Squid-cache" for product "Squid" and version "3.1.13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.14 Search vendor "Squid-cache" for product "Squid" and version "3.1.14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.15 Search vendor "Squid-cache" for product "Squid" and version "3.1.15" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.16 Search vendor "Squid-cache" for product "Squid" and version "3.1.16" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.17 Search vendor "Squid-cache" for product "Squid" and version "3.1.17" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.18 Search vendor "Squid-cache" for product "Squid" and version "3.1.18" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.19 Search vendor "Squid-cache" for product "Squid" and version "3.1.19" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.20 Search vendor "Squid-cache" for product "Squid" and version "3.1.20" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.21 Search vendor "Squid-cache" for product "Squid" and version "3.1.21" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.22 Search vendor "Squid-cache" for product "Squid" and version "3.1.22" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.4 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.5 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.6 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.7 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.8 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.9 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.10 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.11 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.12 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.13 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.14 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.15 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.15" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.16 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.16" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.17 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.17" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.18 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.18" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.19 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.19" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.1 Search vendor "Squid-cache" for product "Squid" and version "3.2.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.2 Search vendor "Squid-cache" for product "Squid" and version "3.2.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.3 Search vendor "Squid-cache" for product "Squid" and version "3.2.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.4 Search vendor "Squid-cache" for product "Squid" and version "3.2.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.5 Search vendor "Squid-cache" for product "Squid" and version "3.2.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.6 Search vendor "Squid-cache" for product "Squid" and version "3.2.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.7 Search vendor "Squid-cache" for product "Squid" and version "3.2.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.8 Search vendor "Squid-cache" for product "Squid" and version "3.2.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.9 Search vendor "Squid-cache" for product "Squid" and version "3.2.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.10 Search vendor "Squid-cache" for product "Squid" and version "3.2.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.11 Search vendor "Squid-cache" for product "Squid" and version "3.2.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.12 Search vendor "Squid-cache" for product "Squid" and version "3.2.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.0 Search vendor "Squid-cache" for product "Squid" and version "3.3.0" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.3.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.3.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.3.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.1 Search vendor "Squid-cache" for product "Squid" and version "3.3.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.2 Search vendor "Squid-cache" for product "Squid" and version "3.3.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.3 Search vendor "Squid-cache" for product "Squid" and version "3.3.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.4 Search vendor "Squid-cache" for product "Squid" and version "3.3.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.5 Search vendor "Squid-cache" for product "Squid" and version "3.3.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.6 Search vendor "Squid-cache" for product "Squid" and version "3.3.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.7 Search vendor "Squid-cache" for product "Squid" and version "3.3.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.8 Search vendor "Squid-cache" for product "Squid" and version "3.3.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.9 Search vendor "Squid-cache" for product "Squid" and version "3.3.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.10 Search vendor "Squid-cache" for product "Squid" and version "3.3.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.11 Search vendor "Squid-cache" for product "Squid" and version "3.3.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.3.12 Search vendor "Squid-cache" for product "Squid" and version "3.3.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.4.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.4.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.4.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.1 Search vendor "Squid-cache" for product "Squid" and version "3.4.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.2 Search vendor "Squid-cache" for product "Squid" and version "3.4.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.3 Search vendor "Squid-cache" for product "Squid" and version "3.4.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.4 Search vendor "Squid-cache" for product "Squid" and version "3.4.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.5 Search vendor "Squid-cache" for product "Squid" and version "3.4.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.6 Search vendor "Squid-cache" for product "Squid" and version "3.4.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.4.7 Search vendor "Squid-cache" for product "Squid" and version "3.4.7" | - |
Affected
| ||||||