CVE catalog

CVE-2013-4115

squid affected and fixed versions

Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.

Severity: Low
Published: Jul 10, 2013, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 43.90% · Oct 27, 2026

Projects and upstream resources

[squid][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	squid	`6.13-2+deb13u2`	Not affected	[CVE-2013-4115]
Debiantrixie	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debiantrixie	squid	`6.13-2+deb13u3`	Not affected	[CVE-2013-4115]
Debiansid	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debiansid	squid	`7.7-1`	Not affected	[CVE-2013-4115]
Debianforky	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debianforky	squid	`7.7-1`	Not affected	[CVE-2013-4115]
Debianbookworm-security	squid	`5.7-2+deb12u6`	Not affected	[CVE-2013-4115]
Debianbookworm	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debianbookworm	squid	`5.7-2+deb12u5`	Not affected	[CVE-2013-4115]

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Debianbookworm	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debianbookworm	squid	`5.7-2+deb12u5`	Not affected	[CVE-2013-4115]
Debianbookworm-security	squid	`5.7-2+deb12u6`	Not affected	[CVE-2013-4115]
Debianforky	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debianforky	squid	`7.7-1`	Not affected	[CVE-2013-4115]
Debiansid	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debiansid	squid	`7.7-1`	Not affected	[CVE-2013-4115]
Debiantrixie	squid	Not reported	Not affectedDistribution reports not affected	[CVE-2013-4115]
Debiantrixie	squid	`6.13-2+deb13u3`	Not affected	[CVE-2013-4115]
Debiantrixie-security	squid	`6.13-2+deb13u2`	Not affected	[CVE-2013-4115]

Original provider fields

{
  "package_releases": [
    {
      "name": "squid",
      "status": "not affected",
      "release": "sid",
      "version": "7.7-1"
    },
    {
      "name": "squid",
      "status": "not affected",
      "release": "forky",
      "version": "7.7-1"
    },
    {
      "name": "squid",
      "status": "not affected",
      "release": "trixie",
      "version": "6.13-2+deb13u3"
    },
    {
      "name": "squid",
      "status": "not affected",
      "release": "trixie-security",
      "version": "6.13-2+deb13u2"
    },
    {
      "name": "squid",
      "status": "not affected",
      "release": "bookworm",
      "version": "5.7-2+deb12u5"
    },
    {
      "name": "squid",
      "status": "not affected",
      "release": "bookworm-security",
      "version": "5.7-2+deb12u6"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "squid",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "squid",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "squid",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "squid",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": []
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[squid]Unknown
Details (4)
- 5.7-2+deb12u5 · amd64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u5 · arm64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · amd64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · arm64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
[squid-cgi]Unknown
Source package: [squid]
Details (4)
- 5.7-2+deb12u5 · amd64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u5 · arm64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · amd64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · arm64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
[squidclient]Unknown
Source package: [squid]
Details (4)
- 5.7-2+deb12u5 · amd64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u5 · arm64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · amd64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · arm64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
[squid-common]Unknown
Source package: [squid]
Details (4)
- 5.7-2+deb12u5 · all · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u5 · all · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · all · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · all · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
[squid-openssl]Unknown
Source package: [squid]
Details (4)
- 5.7-2+deb12u5 · amd64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u5 · arm64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · amd64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · arm64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
[squid-purge]Unknown
Source package: [squid]
Details (4)
- 5.7-2+deb12u5 · amd64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u5 · arm64 · bookworm
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · amd64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm
- 5.7-2+deb12u6 · arm64 · bookworm-security
  Not affected
  dsa · squid · debian · bookworm

Observed: Oct 23, 2026, 5:08:24 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]