{"id":"CVE-2013-4115","aliases":["EUVD-2013-4044","GHSA-8f69-q75r-2vcf","MGASA-2013-0227","MGASA-2013-0228","RHSA-2014:1148","SUSE-SU-2016:2089-1"],"status":"published","title":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3...","description":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.43895,"percentile":0.98756,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2013-07-21T20:16:43Z","modified":"2026-06-28T10:11:18Z","fixes":[{"ecosystem":"Mageia:2","package":"squid","fixed_in":["3.1.19-4.4.mga2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.19-4.4.mga2"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.10-1.4.mga3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.6.STABLE21-7.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.6.STABLE21-7.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.6.STABLE21-7.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:2.6.STABLE21-7.el5_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.10-22.el6_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.10-22.el6_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.10-22.el6_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.10-22.el6_5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.30.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.30.1"}]}],"bundled":25}],"products":[{"vendor":"opensuse","product":"opensuse"},{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10487.patch","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2013_2.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web","article"]},{"url":"http://secunia.com/advisories/54076","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00033.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/54834","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v3/3.3/changesets/squid-3.3-12587.patch","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/61111","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11823.patch","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/54839","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9200.patch","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00024.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/85564","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/07/11/8","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4115","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8f69-q75r-2vcf"},{"url":"https://advisories.mageia.org/MGASA-2013-0227.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10516","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2013-0228.html","tags":["advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2013_3.txt","tags":["web"]},{"url":"ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.2/squid-3.2.0.9-RELEASENOTES.html#ss2.4","tags":["web"]},{"url":"http://www.squid-cache.org/Doc/man/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1148","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=983653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134209","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1148.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4115","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3609","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3609","tags":["advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2014_2.txt","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162089-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/895773","tags":["report"]},{"url":"https://bugzilla.suse.com/902197","tags":["report"]},{"url":"https://bugzilla.suse.com/938715","tags":["report"]},{"url":"https://bugzilla.suse.com/963539","tags":["report"]},{"url":"https://bugzilla.suse.com/967011","tags":["report"]},{"url":"https://bugzilla.suse.com/968392","tags":["report"]},{"url":"https://bugzilla.suse.com/968393","tags":["report"]},{"url":"https://bugzilla.suse.com/968394","tags":["report"]},{"url":"https://bugzilla.suse.com/968395","tags":["report"]},{"url":"https://bugzilla.suse.com/973782","tags":["report"]},{"url":"https://bugzilla.suse.com/973783","tags":["report"]},{"url":"https://bugzilla.suse.com/976553","tags":["report"]},{"url":"https://bugzilla.suse.com/976556","tags":["report"]},{"url":"https://bugzilla.suse.com/976708","tags":["report"]},{"url":"https://bugzilla.suse.com/979008","tags":["report"]},{"url":"https://bugzilla.suse.com/979009","tags":["report"]},{"url":"https://bugzilla.suse.com/979010","tags":["report"]},{"url":"https://bugzilla.suse.com/979011","tags":["report"]},{"url":"https://bugzilla.suse.com/993299","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4556","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-4115","description":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.","status":"published","published":"2013-08-09T22:00:00Z","modified":"2024-08-06T16:30:50.017Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-4044","description":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.","status":"published","published":"2013-08-09T22:00:00Z","modified":"2024-08-06T16:30:50Z","updated_at":"2026-11-03T01:56:33.227006Z"}],"ghsa":[{"id":"GHSA-8f69-q75r-2vcf","title":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3...","description":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.","status":"published","published":"2022-05-14T02:10:40Z","modified":"2023-02-02T05:05:17Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:03.631935Z"}],"nvd":[{"id":"CVE-2013-4115","description":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.","status":"published","published":"2013-08-09T22:55:03.747Z","modified":"2026-06-16T23:56:39.167Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:31.592595Z"}],"osv":[{"id":"MGASA-2013-0227","title":"Updated squid packages fix security vulnerability","description":"Due to incorrect data validation Squid is vulnerable to a buffer overflow\nattack when processing specially crafted HTTP requests. This problem allows\nany trusted client or client script who can generate HTTP requests to trigger\na buffer overflow in Squid, resulting in a termination of the Squid service\n(CVE-2013-4115).\n","status":"published","published":"2013-07-21T20:16:43Z","modified":"2026-04-16T06:24:47.386781259Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2013-0228","title":"Updated squid packages fix security vulnerabilities","description":"Due to incorrect data validation Squid is vulnerable to a buffer overflow\nattack when processing specially crafted HTTP requests. This problem allows\nany trusted client or client script who can generate HTTP requests to trigger\na buffer overflow in Squid, resulting in a termination of the Squid service\n(CVE-2013-4115).\n\nDue to incorrect data validation Squid is vulnerable to a denial of service\nattack when processing specially crafted HTTP requests. This problem allows\nany client who can generate HTTP requests to perform a denial of service\nattack on the Squid service (CVE-2013-4123).\n\nAlso, due to being renamed in Squid 3.2, the Squid external acl helpers for\nmatching against IP addresses and LDAP groups were not selected to be built\nin the squid package for Mageia 3.\n\nThis has been corrected and these helpers are now included.  Additionally,\nthe helpers for eDirectory IP address lookups and matching LDAP groups using\nKerberos credentials have also been included.\n","status":"published","published":"2013-07-21T20:18:36Z","modified":"2026-04-16T06:25:58.294820597Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2014:1148","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-15T21:56:45Z","modified":"2026-06-28T10:11:18Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2016:2089-1","title":"Security update for squid3","description":"\n\nThis update for squid3 fixes the following issues:\n\n- Multiple issues in pinger ICMP processing.  (CVE-2014-7141, CVE-2014-7142) \n\n- CVE-2016-3947: Buffer overrun issue in pinger\n    ICMPv6 processing. (bsc#973782)\n\n-  CVE-2016-4554: fix header smuggling issue in HTTP Request processing (bsc#979010)\n\n- Fix multiple Denial of Service issues in HTTP Response processing.\n    (CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572,\n     bsc#968392, bsc#968393, bsc#968394, bsc#968395)\n- Regression caused by the DoS fixes above (bsc#993299)\n\n- CVE-2016-3948: Fix denial of service in HTTP Response processing (bsc#973783)\n\n- CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553)\n\n- CVE-2016-4052, CVE-2016-4053, CVE-2016-4054:\n  * fixes multiple issues in ESI processing (bsc#976556)\n\n- CVE-2016-4556: fixes double free vulnerability in Esi.cc (bsc#979008)\n\n- CVE-2015-5400: Improper Protection of Alternate Path (bsc#938715)\n\n- CVE-2014-6270: fix off-by-one in snmp subsystem (bsc#895773)\n\n- Memory leak in squid3 when using external_acl (bsc#976708)\n","status":"published","published":"2016-08-16T12:56:03Z","modified":"2026-02-04T03:13:42.545823Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}