PT-2005-1507 · Squid+1 · Squid+2
Publicado
2005-02-15
·
Atualizado
2017-10-11
·
CVE-2005-0446
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Squid versions 2.5.STABLE8 and earlier
Description
The issue allows remote attackers to cause a denial of service, resulting in a crash, via certain DNS responses. This is triggered by specific data regarding Fully Qualified Domain Names (FQDN) in
fqdncache.c or IP addresses in ipcache.c, leading to an assertion failure.Recommendations
For Squid versions 2.5.STABLE8 and earlier, consider updating to a version that is not affected by this issue, as no specific fix is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Squid
Squid Cache