CVE-2005-0446: Medium severity Squid Squid vulnerability
Published Feb 15, 2005
·Updated
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Affected Software
59 affected components
Squid Squid=2.0.patch1
Squid Squid=2.0.patch2
Squid Squid=2.0.pre1
Squid Squid=2.0.release
Squid Squid=2.0_patch2
Squid Squid=2.1.patch1
Squid Squid=2.1.patch2
Squid Squid=2.1.pre1
Squid Squid=2.1.pre3
Squid Squid=2.1.pre4
Squid Squid=2.1.release
Squid Squid=2.1_patch2
Squid Squid=2.2.devel3
Squid Squid=2.2.devel4
Squid Squid=2.2.pre1
Squid Squid=2.2.pre2
Squid Squid=2.2.stable1
Squid Squid=2.2.stable2
Squid Squid=2.2.stable3
Squid Squid=2.2.stable4
Squid Squid=2.2.stable5
Squid Squid=2.3.devel2
Squid Squid=2.3.devel3
Squid Squid=2.3.stable1
Squid Squid=2.3.stable2
Squid Squid=2.3.stable3
Squid Squid=2.3.stable4
Squid Squid=2.3.stable5
Squid Squid=2.3_.stable4
Squid Squid=2.3_.stable5
Squid Squid=2.3_stable5
Squid Squid=2.4
Squid Squid=2.4.stable1
Squid Squid=2.4.stable2
Squid Squid=2.4.stable3
Squid Squid=2.4.stable4
Squid Squid=2.4.stable6
Squid Squid=2.4.stable7
Squid Squid=2.4_.stable2
Squid Squid=2.4_.stable6
Squid Squid=2.4_.stable7
Squid Squid=2.4_stable7
Squid Squid=2.5.6
Squid Squid=2.5.stable1
Squid Squid=2.5.stable2
Squid Squid=2.5.stable3
Squid Squid=2.5.stable4
Squid Squid=2.5.stable5
Squid Squid=2.5.stable6
Squid Squid=2.5.stable7
Squid Squid=2.5.stable8
Squid Squid=2.5_.stable1
Squid Squid=2.5_.stable3
Squid Squid=2.5_.stable4
Squid Squid=2.5_.stable5
Squid Squid=2.5_.stable6
Squid Squid=2.5_stable3
Squid Squid=2.5_stable4
Squid Squid=2.5_stable9
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Feb 15, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0446?
CVE-2005-0446 is categorized as a denial of service vulnerability.
2
How do I fix CVE-2005-0446?
To fix CVE-2005-0446, upgrade to Squid version 2.5.STABLE9 or later.
3
What kind of attack does CVE-2005-0446 facilitate?
CVE-2005-0446 facilitates a denial of service attack through specific malformed DNS responses.
4
Which versions of Squid are affected by CVE-2005-0446?
CVE-2005-0446 affects Squid versions 2.5.STABLE8 and earlier.
5
Is CVE-2005-0446 publicly known?
Yes, CVE-2005-0446 is a publicly recognized vulnerability listed in the Common Vulnerabilities and Exposures database.