Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-0446
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0446

2005-05-0204:00:00
[email protected]
web.nvd.nist.gov
29
squid
dns
denial of service
crash
nvd
cve-2005-0446

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.958 High

EPSS

Percentile

99.4%

JSON

Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.

Affected configurations

NVD
Node
squidsquidMatch2.0.patch1
OR
squidsquidMatch2.0.patch2
OR
squidsquidMatch2.0.pre1
OR
squidsquidMatch2.0.release
OR
squidsquidMatch2.0_patch2
OR
squidsquidMatch2.1.patch1
OR
squidsquidMatch2.1.patch2
OR
squidsquidMatch2.1.pre1
OR
squidsquidMatch2.1.pre3
OR
squidsquidMatch2.1.pre4
OR
squidsquidMatch2.1.release
OR
squidsquidMatch2.1_patch2
OR
squidsquidMatch2.2.devel3
OR
squidsquidMatch2.2.devel4
OR
squidsquidMatch2.2.pre1
OR
squidsquidMatch2.2.pre2
OR
squidsquidMatch2.2.stable1
OR
squidsquidMatch2.2.stable2
OR
squidsquidMatch2.2.stable3
OR
squidsquidMatch2.2.stable4
OR
squidsquidMatch2.2.stable5
OR
squidsquidMatch2.3.devel2
OR
squidsquidMatch2.3.devel3
OR
squidsquidMatch2.3.stable1
OR
squidsquidMatch2.3.stable2
OR
squidsquidMatch2.3.stable3
OR
squidsquidMatch2.3.stable4
OR
squidsquidMatch2.3.stable5
OR
squidsquidMatch2.3_.stable4
OR
squidsquidMatch2.3_.stable5
OR
squidsquidMatch2.3_stable5
OR
squidsquidMatch2.4
OR
squidsquidMatch2.4.stable1
OR
squidsquidMatch2.4.stable2
OR
squidsquidMatch2.4.stable3
OR
squidsquidMatch2.4.stable4
OR
squidsquidMatch2.4.stable6
OR
squidsquidMatch2.4.stable7
OR
squidsquidMatch2.4_.stable2
OR
squidsquidMatch2.4_.stable6
OR
squidsquidMatch2.4_.stable7
OR
squidsquidMatch2.4_stable7
OR
squidsquidMatch2.5.6
OR
squidsquidMatch2.5.stable1
OR
squidsquidMatch2.5.stable2
OR
squidsquidMatch2.5.stable3
OR
squidsquidMatch2.5.stable4
OR
squidsquidMatch2.5.stable5
OR
squidsquidMatch2.5.stable6
OR
squidsquidMatch2.5.stable7
OR
squidsquidMatch2.5.stable8
OR
squidsquidMatch2.5_.stable1
OR
squidsquidMatch2.5_.stable3
OR
squidsquidMatch2.5_.stable4
OR
squidsquidMatch2.5_.stable5
OR
squidsquidMatch2.5_.stable6
OR
squidsquidMatch2.5_stable3
OR
squidsquidMatch2.5_stable4
OR
squidsquidMatch2.5_stable9

Related

osv 1
nessus 11
debian 2
openvas 9
gentoo 1
redhat 3
cvelist 1
nvd 1
debiancve 1
ubuntucve 1
ubuntu 1
centos 1
cert 1
suse 1
freebsd 1
osv
osv
squid - mising input sanitising
2005-02-23 00:00:00
nessus
nessus
Fedora Core 2 : squid-2.5.STABLE8-1.FC2.1 (2005-153)
2005-09-12 00:00:00
GLSA-200502-25 : Squid: Denial of Service through DNS responses
2005-02-18 00:00:00
Mandrake Linux Security Advisory : squid (MDKSA-2005:047)
2005-02-25 00:00:00
debian
debian
[SECURITY] [DSA 688-1] New squid packages fix denial of service
2005-02-23 11:09:45
[SECURITY] [DSA 688-1] New squid packages fix denial of service
2005-02-23 11:09:45
openvas
openvas
Gentoo Security Advisory GLSA 200502-25 (Squid)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200502-25 (Squid)
2008-09-24 00:00:00
Debian: Security Advisory (DSA-688-1)
2008-01-17 00:00:00
gentoo
gentoo
Squid: Denial of Service through DNS responses
2005-02-18 00:00:00
redhat
redhat
(RHSA-2005:201) squid security update
2005-03-16 00:00:00
(RHSA-2005:173) squid security update
2005-03-03 00:00:00
(RHSA-2005:212) dhcp security update
2005-04-12 00:00:00
cvelist
cvelist
CVE-2005-0446
2005-02-15 05:00:00
nvd
nvd
CVE-2005-0446
2005-05-02 04:00:00
debiancve
debiancve
CVE-2005-0446
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-0446
2005-05-02 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2005-02-21 00:00:00
centos
centos
dhcp security update
2005-04-12 23:06:20
cert
cert
Squid fails to parse empty access control lists correctly
2005-02-21 00:00:00
suse
suse
remote denial of service in squid
2005-02-22 13:31:16
freebsd
freebsd
squid -- denial-of-service vulnerabilities
2005-01-16 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.958 High

EPSS

Percentile

99.4%

JSON
Related for CVE-2005-0446
osv1nessus11debian2openvas9gentoo1redhat3cvelist1nvd1debiancve1ubuntucve1ubuntu1centos1cert1suse1freebsd1