RedHatRHSA-2005:173(RHSA-2005:173) squid security update
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.961 High
EPSS
Percentile
99.4%
Squid is a full-featured Web proxy cache.
A bug was found in the way Squid handles FQDN lookups. It was possible
to crash the Squid server by sending a carefully crafted DNS response to
an FQDN lookup. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0446 to this issue.
Users of squid should upgrade to this updated package, which contains a
backported patch, and is not vulnerable to this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | any | i386 | squid | < 2.4.STABLE7-1.21as.5 | squid-2.4.STABLE7-1.21as.5.i386.rpm |
| RedHat | any | i386 | squid | < 2.5.STABLE3-6.3E.8 | squid-2.5.STABLE3-6.3E.8.i386.rpm |
| RedHat | any | ia64 | squid | < 2.5.STABLE3-6.3E.8 | squid-2.5.STABLE3-6.3E.8.ia64.rpm |
| RedHat | any | s390 | squid | < 2.5.STABLE3-6.3E.8 | squid-2.5.STABLE3-6.3E.8.s390.rpm |
| RedHat | any | ia64 | squid | < 2.4.STABLE7-1.21as.5 | squid-2.4.STABLE7-1.21as.5.ia64.rpm |
| RedHat | any | ppc | squid | < 2.5.STABLE3-6.3E.8 | squid-2.5.STABLE3-6.3E.8.ppc.rpm |
| RedHat | any | x86_64 | squid | < 2.5.STABLE3-6.3E.8 | squid-2.5.STABLE3-6.3E.8.x86_64.rpm |
| RedHat | any | s390x | squid | < 2.5.STABLE3-6.3E.8 | squid-2.5.STABLE3-6.3E.8.s390x.rpm |
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.961 High
EPSS
Percentile
99.4%