{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/101389?format=json","vulnerability_id":"VCID-zq3z-pce4-5udp","summary":"Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.","aliases":[{"alias":"CVE-2013-4115"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/129559?format=json","purl":"pkg:deb/debian/squid@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/129554?format=json","purl":"pkg:deb/debian/squid@4.13-10%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5tpw-u7cg-hqd7"},{"vulnerability":"VCID-7sua-wuyu-cqby"},{"vulnerability":"VCID-pshb-b8z8-gqhm"},{"vulnerability":"VCID-qyjc-znbd-dub6"},{"vulnerability":"VCID-rv56-tjvg-bbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@4.13-10%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/129552?format=json","purl":"pkg:deb/debian/squid@5.7-2%2Bdeb12u5?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5tpw-u7cg-hqd7"},{"vulnerability":"VCID-7sua-wuyu-cqby"},{"vulnerability":"VCID-pshb-b8z8-gqhm"},{"vulnerability":"VCID-qyjc-znbd-dub6"},{"vulnerability":"VCID-rv56-tjvg-bbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@5.7-2%252Bdeb12u5%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/129556?format=json","purl":"pkg:deb/debian/squid@6.13-2%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5tpw-u7cg-hqd7"},{"vulnerability":"VCID-pshb-b8z8-gqhm"},{"vulnerability":"VCID-qyjc-znbd-dub6"},{"vulnerability":"VCID-rv56-tjvg-bbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@6.13-2%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/129555?format=json","purl":"pkg:deb/debian/squid@7.5-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/squid@7.5-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/191511?format=json","purl":"pkg:ebuild/net-proxy/squid@3.2.13","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/net-proxy/squid@3.2.13"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/175868?format=json","purl":"pkg:rpm/redhat/squid@7:2.6.STABLE21-7?arch=el5_10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-t7px-3uvt-a3hn"},{"vulnerability":"VCID-zq3z-pce4-5udp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/squid@7:2.6.STABLE21-7%3Farch=el5_10"},{"url":"http://public2.vulnerablecode.io/api/packages/175866?format=json","purl":"pkg:rpm/redhat/squid@7:3.1.10-22?arch=el6_5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-t7px-3uvt-a3hn"},{"vulnerability":"VCID-zq3z-pce4-5udp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/squid@7:3.1.10-22%3Farch=el6_5"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4115.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4115.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-4115","reference_id":"","reference_type":"","scores":[{"value":"0.75061","scoring_system":"epss","scoring_elements":"0.98893","published_at":"2026-06-04T12:55:00Z"},{"value":"0.75061","scoring_system":"epss","scoring_elements":"0.98895","published_at":"2026-06-07T12:55:00Z"},{"value":"0.75061","scoring_system":"epss","scoring_elements":"0.98896","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-4115"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=983653","reference_id":"983653","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=983653"},{"reference_url":"https://security.gentoo.org/glsa/201309-22","reference_id":"GLSA-201309-22","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201309-22"},{"reference_url":"https://access.redhat.com/errata/RHSA-2014:1148","reference_id":"RHSA-2014:1148","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2014:1148"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.7","risk_score":0.3,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zq3z-pce4-5udp"}