CVE-2004-0918: Gentoo Linux

Medium severity, CVSS 5.0. EPSS: 15.8% chance of exploitation in the next 30 days.

The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.

Affected products

• Gentoo Linux: any version
• Openpkg Openpkg: version 2.1 only; version 2.2 only; version current only
• Red Hat Fedora Core: version core_2.0 only
• Squid Squid: version 2.0_patch2 only; version 2.1_patch2 only; version 2.3_.stable4 only; version 2.3_.stable5 only; version 2.4 only; version 2.4_.stable2 only; …
• Trustix Secure Linux: version 1.5 only; version 2.0 only; version 2.1 only
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2005-01-27. Last modified 2026-06-16.