← All CVEs

CVE-2005-0446

medium · 5

Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.

5
CVSS
41.1%
EPSS (exploit prob.)
99th
EPSS percentile
2005-05-02
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
squidsquid2.0.patch1
squidsquid2.0.patch2
squidsquid2.0.pre1
squidsquid2.0.release
squidsquid2.0_patch2
squidsquid2.1.patch1
squidsquid2.1.patch2
squidsquid2.1.pre1
squidsquid2.1.pre3
squidsquid2.1.pre4
squidsquid2.1.release
squidsquid2.1_patch2
squidsquid2.2.devel3
squidsquid2.2.devel4
squidsquid2.2.pre1
squidsquid2.2.pre2
squidsquid2.2.stable1
squidsquid2.2.stable2
squidsquid2.2.stable3
squidsquid2.2.stable4
squidsquid2.2.stable5
squidsquid2.3.devel2
squidsquid2.3.devel3
squidsquid2.3.stable1
squidsquid2.3.stable2
squidsquid2.3.stable3
squidsquid2.3.stable4
squidsquid2.3.stable5
squidsquid2.3_.stable4
squidsquid2.3_.stable5
squidsquid2.3_stable5
squidsquid2.4
squidsquid2.4.stable1
squidsquid2.4.stable2
squidsquid2.4.stable3
squidsquid2.4.stable4
squidsquid2.4.stable6
squidsquid2.4.stable7
squidsquid2.4_.stable2
squidsquid2.4_.stable6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-0446