CVE-2014-6270
squid: off-by-one error in snmpHandleUdp() leading to a bss-based buffer overflow (SQUID-2014:3)
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · September 9, 2014
Updated · November 21, 2025
Description
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-193 · Off-by-one Error