CVE-2011-3205
NoneCVSS
—
EPSS
27.5%
Published
Sep 6, 2011
CISA due date
—
The record
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:5.0 | squid3 | 0 | 3.0.STABLE8-3+lenny5 |
| Debian:6.0 | squid3 | 0 | 3.1.6-1.2+squeeze1 |
| Red Hat:enterprise_linux:6::server | squid | 0 | 7:3.1.10-1.el6_1.1 |
| Red Hat:enterprise_linux:6::server | squid-debuginfo | 0 | 7:3.1.10-1.el6_1.1 |
| SUSE:Linux Enterprise Server 11 SP4 | squid3 | 0 | 3.1.23-8.16.30.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | squid3 | 0 | 3.1.23-8.16.30.1 |
Related vulnerabilities
- CVE-2010-3072 The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before… Also affects squid3
- CVE-2010-0308 lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows… Also affects squid3
- CVE-2009-2855 The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers… Also affects squid3
- CVE-2009-2622 Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause… Also affects squid3
- CVE-2009-2621 Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer… Also affects squid3
- CVE-2015-5400 Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured… Also affects squid3
- CVE-2014-3609 HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers… Also affects squid3
- CVE-2013-0189 cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows… Also affects squid3