CVE-2013-4115: Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through...

Security readout for executives and security teams

This flaw can let a remote party crash vulnerable Squid proxy servers by sending an overly long DNS lookup name. The known impact is denial of service from memory corruption and server termination, not confirmed data theft or code execution in the supplied sources. Exposure is most relevant where Squid 3.2.x or 3.3.x is deployed as a proxy and reachable by untrusted clients. Internet-facing or broadly accessible proxy services carry higher availability risk. Schedule remediation in normal vulnerability management cadence, faster for externally reachable or business-critical proxies. The business risk is service outage and proxy disruption, not confirmed compromise based on supplied evidence. Mitigation focus: Identify Squid versions across proxy and gateway infrastructure.; Prioritize Squid 3.2 through 3.2.11 and 3.3 through 3.3.6.; Apply Squid or OS vendor security updates referenced by the vendor advisories..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.