CVE-2014-7141
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a…
published November 26, 2014
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.
What it is
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.76064 · 99.5th percentile
- Published
- 2014-11-26T15:00Z
EPSS history
Timeline