Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 - Patch, Vendor Advisory | |
| References | () http://fedoranews.org/updates/FEDORA--.shtml - | |
| References | () http://marc.info/?l=bugtraq&m=110901183320453&w=2 - | |
| References | () http://secunia.com/advisories/14271 - Patch, Vendor Advisory | |
| References | () http://www.debian.org/security/2005/dsa-688 - Patch, Vendor Advisory | |
| References | () http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml - Patch, Vendor Advisory | |
| References | () http://www.mandriva.com/security/advisories?name=MDKSA-2005:047 - | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-173.html - Patch, Vendor Advisory | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-201.html - | |
| References | () http://www.securityfocus.com/bid/12551 - | |
| References | () http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert - Patch | |
| References | () http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch - Patch | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/19332 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264 - |
Information
Published : 2005-05-02 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2005-0446
Mitre link : CVE-2005-0446
CVE.ORG link : CVE-2005-0446
JSON object : View
Products Affected
squid
- squid
CWE