Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Squid pinger 基于堆的缓冲区溢出漏洞
Vulnerability Description
Squid（全称Squid Cache）是一套代理服务器和Web缓存服务器软件，它提供缓存万维网、过滤流量、代理上网等功能。pinger是其中的一个用于指定ping进程完整路径的进程。 Squid 3.5.16之前版本和4.0.8之前4.x版本的pinger中的icmp/Icmp6.cc文件中的‘Icmp6::Recv’函数存在基于堆的缓冲区溢出漏洞。远程攻击者可通过发送特制的ICMPv6数据包利用该漏洞造成拒绝服务（性能退化或转换失败），或向日志文件中写入敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A