Cloudanix VulnDB

CVE-2005-0095

None

CVSS

—

EPSS

68.8%

Published

Jan 15, 2005

CISA due date

—

The record

The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 squid 0 2.5.7-4
Debian:12 squid 0 2.5.7-4
Debian:13 squid 0 2.5.7-4
Debian:3.0 squid 0 2.4.6-2woody5
Red Hat:enterprise_linux:3::as squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::as squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::desktop squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::desktop squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::es squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::es squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::ws squid 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:3::ws squid-debuginfo 0 7:2.5.STABLE3-6.3E.7
Red Hat:enterprise_linux:4::as squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::as squid-debuginfo 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::desktop squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::desktop squid-debuginfo 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::es squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::es squid-debuginfo 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::ws squid 0 7:2.5.STABLE6-3.4E.3
Red Hat:enterprise_linux:4::ws squid-debuginfo 0 7:2.5.STABLE6-3.4E.3

Related vulnerabilities