CVE-2011-4096: Squid-Cache Squid

Medium severity, CVSS 5.0. EPSS: 37.2% chance of exploitation in the next 30 days.

The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

Affected products

• Squid-Cache Squid: up to and including 3.1.15; version 3.0 only; version 3.0.stable1 only; version 3.0.stable2 only; version 3.0.stable3 only; version 3.0.stable4 only; …

Published 2011-11-17. Last modified 2026-06-16.