Squid is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Squid 3.1.6 is vulnerable other versions may also be affected.

Updates are available. Please see the references for details.

• http://marc.info/?l=squid-users&m=128263555724981&w=2
• http://www.squid-cache.org/
• https://bugzilla.redhat.com/show_bug.cgi?id=62692
• https://www.securityfocus.com/bid/42645

---

Updated on 2015-03-25