CVE-2005-0446
Fixed in a distro release EPSS 41%
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Products: squid
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | squid | 2.5.8-3 |
| Debian 13 | squid | 2.5.8-3 |
| Debian 14 | squid | 2.5.8-3 |
| Debian 3.0 | squid | 2.4.6-2woody7 |
| Red Hat Enterprise Linux 3 | squid | 7:2.5.STABLE3-6.3E.8 |
| Red Hat Enterprise Linux 3 | squid-debuginfo | 7:2.5.STABLE3-6.3E.8 |
| Red Hat Enterprise Linux 4 | squid | 7:2.5.STABLE6-3.4E.5 |
| Red Hat Enterprise Linux 4 | squid-debuginfo | 7:2.5.STABLE6-3.4E.5 |