CVE-2005-0446

Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
References
Link Resource
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 Patch Vendor Advisory
http://fedoranews.org/updates/FEDORA--.shtml
http://marc.info/?l=bugtraq&m=110901183320453&w=2
http://secunia.com/advisories/14271 Patch Vendor Advisory
http://www.debian.org/security/2005/dsa-688 Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml Patch Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:047
http://www.redhat.com/support/errata/RHSA-2005-173.html Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-201.html
http://www.securityfocus.com/bid/12551
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert Patch
http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19332
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 Patch Vendor Advisory
http://fedoranews.org/updates/FEDORA--.shtml
http://marc.info/?l=bugtraq&m=110901183320453&w=2
http://secunia.com/advisories/14271 Patch Vendor Advisory
http://www.debian.org/security/2005/dsa-688 Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml Patch Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:047
http://www.redhat.com/support/errata/RHSA-2005-173.html Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-201.html
http://www.securityfocus.com/bid/12551
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert Patch
http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19332
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:squid:squid:2.0.patch1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.0.patch2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.0.pre1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.0.release:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.1.patch1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.1.patch2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.1.pre1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.1.pre3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.1.pre4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.1.release:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.devel3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.devel4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.pre1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.pre2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.stable1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.stable2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.2.stable5:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3.devel2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3.devel3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3.stable1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3.stable2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3.stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3.stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3.stable5:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3_.stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3_.stable5:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4.stable1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4.stable2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4.stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4.stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4.stable6:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4.stable7:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4_.stable2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4_.stable6:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4_.stable7:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.6:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable5:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable6:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable7:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_.stable1:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_.stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_.stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_.stable6:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*

History

No history.

Information

Published : 2005-05-02 04:00

Updated : 2025-04-03 01:03


NVD link : CVE-2005-0446

Mitre link : CVE-2005-0446

CVE.ORG link : CVE-2005-0446


JSON object : View

Products Affected

squid

  • squid