CVE-2005-0446 Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresse...
MediumCVSS 5.0
EPSS 41.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | = 2.0.patch1 | No fix listed |
| squid | = 2.0.patch2 | No fix listed |
| squid | = 2.0.pre1 | No fix listed |
| squid | = 2.0.release | No fix listed |
| squid | = 2.0_patch2 | No fix listed |
| squid | = 2.1.patch1 | No fix listed |
| squid | = 2.1.patch2 | No fix listed |
| squid | = 2.1.pre1 | No fix listed |
| squid | = 2.1.pre3 | No fix listed |
| squid | = 2.1.pre4 | No fix listed |
| squid | = 2.1.release | No fix listed |
| squid | = 2.1_patch2 | No fix listed |
| squid | = 2.2.devel3 | No fix listed |
| squid | = 2.2.devel4 | No fix listed |
| squid | = 2.2.pre1 | No fix listed |
| squid | = 2.2.pre2 | No fix listed |
| squid | = 2.2.stable1 | No fix listed |
| squid | = 2.2.stable2 | No fix listed |
| squid | = 2.2.stable3 | No fix listed |
| squid | = 2.2.stable4 | No fix listed |
| squid | = 2.2.stable5 | No fix listed |
| squid | = 2.3.devel2 | No fix listed |
| squid | = 2.3.devel3 | No fix listed |
| squid | = 2.3.stable1 | No fix listed |
| squid | = 2.3.stable2 | No fix listed |
Show 37 more
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | = 2.3.stable3 | No fix listed |
| squid | = 2.3.stable4 | No fix listed |
| squid | = 2.3.stable5 | No fix listed |
| squid | = 2.3_.stable4 | No fix listed |
| squid | = 2.3_.stable5 | No fix listed |
| squid | = 2.3_stable5 | No fix listed |
| squid | = 2.4 | No fix listed |
| squid | = 2.4.stable1 | No fix listed |
| squid | = 2.4.stable2 | No fix listed |
| squid | = 2.4.stable3 | No fix listed |
| squid | = 2.4.stable4 | No fix listed |
| squid | = 2.4.stable6 | No fix listed |
| squid | = 2.4.stable7 | No fix listed |
| squid | = 2.4_.stable2 | No fix listed |
| squid | = 2.4_.stable6 | No fix listed |
| squid | = 2.4_.stable7 | No fix listed |
| squid | = 2.4_stable7 | No fix listed |
| squid | = 2.5.6 | No fix listed |
| squid | = 2.5.stable1 | No fix listed |
| squid | = 2.5.stable2 | No fix listed |
| squid | = 2.5.stable3 | No fix listed |
| squid | = 2.5.stable4 | No fix listed |
| squid | = 2.5.stable5 | No fix listed |
| squid | = 2.5.stable6 | No fix listed |
| squid | = 2.5.stable7 | No fix listed |
| squid | = 2.5.stable8 | No fix listed |
| squid | = 2.5_.stable1 | No fix listed |
| squid | = 2.5_.stable3 | No fix listed |
| squid | = 2.5_.stable4 | No fix listed |
| squid | = 2.5_.stable5 | No fix listed |
| squid | = 2.5_.stable6 | No fix listed |
| squid | = 2.5_stable3 | No fix listed |
| squid | = 2.5_stable4 | No fix listed |
| squid | = 2.5_stable9 | No fix listed |
| debian/squid(Debian:12) | < 2.5.8-3 | 2.5.8-3 |
| debian/squid(Debian:13) | < 2.5.8-3 | 2.5.8-3 |
| debian/squid(Debian:14) | < 2.5.8-3 | 2.5.8-3 |
References
- CLA-2005:931 patch vendor-advisory
- FLSA-2006:152809 vendor-advisory
- 20050221 [USN-84-1] Squid vulnerabilities mailing-list
- 14271 patch third-party-advisory vendor-advisory
- DSA-688 patch vendor-advisory
- GLSA-200502-25 patch vendor-advisory
- MDKSA-2005:047 vendor-advisory
- RHSA-2005:173 patch vendor-advisory
- RHSA-2005:201 vendor-advisory
- 12551 vdb-entry
- www.squid-cache.org patch
- www.squid-cache.org patch
- squid-xstrndup-dos(19332) vdb-entry
- oval:org.mitre.oval:def:11264 signature vdb-entry
- Debian Security Tracker CVE-2005-0446 vendor-advisory