CVE-2011-4096

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows...

5.0 MediumFix available

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

Exploit likelihood

37.2%Up 35.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2011-4096
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-4096
Updated: 2026-11-02

EUVDEUVD-2011-4047 No score

Record: EUVD-2011-4047
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g3fq-pgcr-r7w6 No score

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows...

Record: GHSA-g3fq-pgcr-r7w6
Updated: 2026-11-02

OSVSUSE-SU-2016:2089-1 No score

Security update for squid3

This update for squid3 fixes the following issues:

Multiple issues in pinger ICMP processing. (CVE-2014-7141, CVE-2014-7142)
CVE-2016-3947: Buffer overrun issue in pinger ICMPv6 processing. (bsc#973782)
CVE-2016-4554: fix header smuggling issue in HTTP Request processing (bsc#979010)
Fix multiple Denial of Service issues in HTTP Response processing. (CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572, bsc#968392, bsc#968393, bsc#968394, bsc#968395)
Regression caused by the DoS fixes above (bsc#993299)
CVE-2016-3948: Fix denial of service in HTTP Response processing (bsc#973783)
CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553)
CVE-2016-4052, CVE-2016-4053, CVE-2016-4054:
- fixes multiple issues in ESI processing (bsc#976556)
CVE-2016-4556: fixes double free vulnerability in Esi.cc (bsc#979008)
CVE-2015-5400: Improper Protection of Alternate Path (bsc#938715)
CVE-2014-6270: fix off-by-one in snmp subsystem (bsc#895773)
Memory leak in squid3 when using external_acl (bsc#976708)

Record: SUSE-SU-2016:2089-1
Updated: 2026-11-02

Affected products

squid-cache squid

Affected packages

Affected packages
Package	Affected	Fixed
`squid3` Debian:6.0	before 3.1.6-1.2+squeeze2, plus listed versions 3.1.6-1.23.1.6-1.2+squeeze1	3.1.6-1.2+squeeze2
`squid` Red Hat:enterprise_linux:6::server	before 7:3.1.10-1.el6_2.1	7:3.1.10-1.el6_2.1
`squid-debuginfo` Red Hat:enterprise_linux:6::server	before 7:3.1.10-1.el6_2.1	7:3.1.10-1.el6_2.1
`squid` Red Hat:enterprise_linux:6::workstation	before 7:3.1.10-1.el6_2.1	7:3.1.10-1.el6_2.1
`squid-debuginfo` Red Hat:enterprise_linux:6::workstation	before 7:3.1.10-1.el6_2.1	7:3.1.10-1.el6_2.1
`squid3` SUSE:Linux Enterprise Server 11 SP4 From an advisory covering 25 CVEs	before 3.1.23-8.16.30.1	3.1.23-8.16.30.1
`squid3` SUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 25 CVEs	before 3.1.23-8.16.30.1	3.1.23-8.16.30.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-4096 is a medium vulnerability (CVSS 5.0) in Squid-cache Squid, published November 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 37.2%, the 98th percentile. Fixed in squid3 3.1.6-1.2+squeeze2.

References

Show 58 moreShow less