VYPR
Unrated severityNVD Advisory· Published Jan 27, 2005· Updated Apr 16, 2026

CVE-2004-0918

CVE-2004-0918

Description

The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.

Affected products

26
  • OpenPKG/Openpkg3 versions
    cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openpkg:openpkg:current:*:*:*:*:*:*:*
  • cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:3.0_pre1:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:3.0_pre2:*:*:*:*:*:*:*
    • cpe:2.3:a:squid:squid:3.0_pre3:*:*:*:*:*:*:*
  • cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*
    • cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*
  • Ubuntu/Linux2 versions
    cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*+ 1 more
    • cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*
    • cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

17

News mentions

0

No linked articles in our index yet.