CVEs-PoC/2014/CVE-2014-6270.md

CVE-2014-6270

Description

Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
• http://www.ubuntu.com/usn/USN-2921-1

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/c-skills/CVEs