Description

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

Remediation

References

CVE-2011-4096

Related Vulnerabilities

WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.71)

Microsoft SQL Server CVE-2023-29349 Vulnerability (CVE-2023-29349)

WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar Cross-Site Scripting (3.0.1)

ReviveAdserver Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-7149)

Django Inefficient Regular Expression Complexity Vulnerability (CVE-2023-36053)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2011-4096