CVE-2013-4115

N/A

Published: August 9, 2013 at 10:00 PM UTC

Updated: June 16, 2026 at 11:56 PM UTC

3 products affected across 2 vendorsopenSUSESquidCache Squid

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 44%

Description

Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

openSUSE · openSUSE

95%

11.4 12.2 12.3

Squid · Squid Cache

95%

3.2.0.2 3.2.0.3 3.2.0.4 3.2.0.5 3.2.0.6 3.2.0.7 3.2.0.8 3.2.0.9 3.3.0 3.3.0.2 3.3.0.3 3.3.1 3.3.2 3.3.3 3.3.4 3.3.5 3.3.6

Cache Squid · Squid Cache

75%

3.2.0.2 3.2.0.3 3.2.0.4 3.2.0.5 3.2.0.6 3.2.0.7 3.2.0.8 3.2.0.9 3.3.0 3.3.0.2 3.3.0.3 3.3.1 3.3.2 3.3.3 3.3.4 3.3.5 3.3.6

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references