5

CVE-2005-0446

Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Squid ≫ Squid Version 2.0.patch1
Squid ≫ Squid Version 2.0.patch2
Squid ≫ Squid Version 2.0.pre1
Squid ≫ Squid Version 2.0.release
Squid ≫ Squid Version 2.0_patch2
Squid ≫ Squid Version 2.1.patch1
Squid ≫ Squid Version 2.1.patch2
Squid ≫ Squid Version 2.1.pre1
Squid ≫ Squid Version 2.1.pre3
Squid ≫ Squid Version 2.1.pre4
Squid ≫ Squid Version 2.1.release
Squid ≫ Squid Version 2.1_patch2
Squid ≫ Squid Version 2.2.devel3
Squid ≫ Squid Version 2.2.devel4
Squid ≫ Squid Version 2.2.pre1
Squid ≫ Squid Version 2.2.pre2
Squid ≫ Squid Version 2.2.stable1
Squid ≫ Squid Version 2.2.stable2
Squid ≫ Squid Version 2.2.stable3
Squid ≫ Squid Version 2.2.stable4
Squid ≫ Squid Version 2.2.stable5
Squid ≫ Squid Version 2.3.devel2
Squid ≫ Squid Version 2.3.devel3
Squid ≫ Squid Version 2.3.stable1
Squid ≫ Squid Version 2.3.stable2
Squid ≫ Squid Version 2.3.stable3
Squid ≫ Squid Version 2.3.stable4
Squid ≫ Squid Version 2.3.stable5
Squid ≫ Squid Version 2.3_.stable4
Squid ≫ Squid Version 2.3_.stable5
Squid ≫ Squid Version 2.3_stable5
Squid ≫ Squid Version 2.4
Squid ≫ Squid Version 2.4.stable1
Squid ≫ Squid Version 2.4.stable2
Squid ≫ Squid Version 2.4.stable3
Squid ≫ Squid Version 2.4.stable4
Squid ≫ Squid Version 2.4.stable6
Squid ≫ Squid Version 2.4.stable7
Squid ≫ Squid Version 2.4_.stable2
Squid ≫ Squid Version 2.4_.stable6
Squid ≫ Squid Version 2.4_.stable7
Squid ≫ Squid Version 2.4_stable7
Squid ≫ Squid Version 2.5.6
Squid ≫ Squid Version 2.5.stable1
Squid ≫ Squid Version 2.5.stable2
Squid ≫ Squid Version 2.5.stable3
Squid ≫ Squid Version 2.5.stable4
Squid ≫ Squid Version 2.5.stable5
Squid ≫ Squid Version 2.5.stable6
Squid ≫ Squid Version 2.5.stable7
Squid ≫ Squid Version 2.5.stable8
Squid ≫ Squid Version 2.5_.stable1
Squid ≫ Squid Version 2.5_.stable3
Squid ≫ Squid Version 2.5_.stable4
Squid ≫ Squid Version 2.5_.stable5
Squid ≫ Squid Version 2.5_.stable6
Squid ≫ Squid Version 2.5_stable3
Squid ≫ Squid Version 2.5_stable4
Squid ≫ Squid Version 2.5_stable9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 41.11% 0.985
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://fedoranews.org/updates/FEDORA--.shtml
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110901183320453&w=2
http://secunia.com/advisories/14271
Patch
Vendor Advisory
http://www.debian.org/security/2005/dsa-688
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:047
http://www.redhat.com/support/errata/RHSA-2005-173.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-201.html
http://www.securityfocus.com/bid/12551
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert
Patch
http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19332
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264