PT-2018-3637 · Squid+3 · Squid+4

Flozilla

·

Publicado

2018-10-29

·

Atualizado

2024-06-15

·

CVE-2018-19132

CVSS v3.1

5.9

Média

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Squid versions prior to 4.4
Description The issue is related to a memory leak that can be triggered via an SNMP packet when SNMP is enabled. This can lead to a denial of service. The vulnerability is associated with the lack of resource release after its valid expiration, which can be exploited by a remote attacker to cause a service disruption.
Recommendations For Squid versions prior to 4.4, consider disabling SNMP until a patch is available to prevent potential exploitation. Restrict access to SNMP functionality to minimize the risk of denial of service attacks.

Exploit

Correção

DoS

Missing Release of Resource after Effective Lifetime

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

ALT-PU-2018-2718
BDU:2021-01483
CVE-2018-19132
DLA-1596-1
DLA-2278-1
MGASA-2018-0458
OPENSUSE-SU-2018_3818-1
OPENSUSE-SU-2018_3825-1
OPENSUSE-SU-2024:11403-1
SUSE-SU-2018:3771-1
SUSE-SU-2018:3771-2
SUSE-SU-2018:3786-1
USN-4059-1

Produtos afetados

Alt Linux
Squid
Squid Cache
Suse
Ubuntu