VULNERABILITY INTELLIGENCE
CVE-2011-4096
CVSS score5 MEDIUM
EPSS probability37.19%
CISA KEVNot currently listed
Published2011-11-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.