CVE ID:	CVE-2014-6270
Description:	Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap- based buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2015.0028.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6270 BugTraq ID: 69686 http://www.securityfocus.com/bid/69686 https://security.gentoo.org/glsa/201607-01 http://seclists.org/oss-sec/2014/q3/542 http://seclists.org/oss-sec/2014/q3/550 SuSE Security Announcement: SUSE-SU-2016:1996 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html SuSE Security Announcement: SUSE-SU-2016:2089 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html http://www.ubuntu.com/usn/USN-2921-1 XForce ISS Database: squid-cve20146270-bo(95873) https://exchange.xforce.ibmcloud.com/vulnerabilities/95873