According to its banner, the version of Squid running on the remote host is 3.x prior to 3.4.8. Therefore, it may be affected by the following vulnerabilities :

  - A off-by-one overflow flaw exists within the SNMP     processing component. By using a specially crafted     UDP SNMP request, a remote attacker could exploit this     to cause a denial of service or possibly execute     arbitrary code. (CVE-2014-6270)

  - There exists an array indexing flaw in the node pinger     that is triggered when parsing ICMP and ICMPv6 replies,     which may allow a remote attacker to crash the pinger or     obtain sensitive information. (CVE-2014-7141)

  - The node pinger has a flaw in function 'Icmp4::Recv' in     file 'icmp/Icmp4.cc.' that is triggered when parsing     ICMP or ICMPv6 responses. A remote attacker could     exploit this to crash the pinger or obtain sensitive     information. (CVE-2014-7142)

Note that Nessus has relied only on the version in the proxy server's banner. The patch released to address the issue does not update the version in the banner. If the patch has been applied properly, and the service has been restarted, consider this to be a false positive.

squid was updated to fix two security issues.

These security issues were fixed :

  - CVE-2014-6270: Fixed an off by one in snmp subsystem     (bsc#895773).

  - CVE-2014-9749: Fixed a nonce replay vulnerability in     Digest authentication (bsc#949942).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This updated fixes CVE-2014-6270.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201607-01 (Squid: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Squid. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker can possibly execute arbitrary code or create a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is     configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary     code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow. (CVE-2014-6270)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
79742	Squid 3.x < 3.4.8 Multiple Vulnerabilities	Nessus	Firewalls	2014/12/5	2018/7/30	medium
86883	SUSE SLES11 Security Update : squid (SUSE-SU-2015:1983-1)	Nessus	SuSE Local Security Checks	2015/11/16	2021/1/19	medium
78400	Fedora 19 : squid-3.3.13-2.fc19 (2014-10794)	Nessus	Fedora Local Security Checks	2014/10/14	2021/1/11	medium
91982	GLSA-201607-01 : Squid: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/7/11	2021/1/11	high
218435	Linux Distros Unpatched Vulnerability : CVE-2014-6270	Nessus	Misc.	2025/3/4	2026/7/24	critical

检测

插件搜索

medium

medium

medium

high

critical