CVE-2005-0446

NameCVE-2005-0446
DescriptionSquid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-688-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
squid (PTS)bullseye4.13-10+deb11u3fixed
bullseye (security)4.13-10+deb11u5fixed
bookworm5.7-2+deb12u3fixed
bookworm (security)5.7-2+deb12u4fixed
trixie6.13-2fixed
trixie (security)6.13-2+deb13u1fixed
forky, sid7.2-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
squidsourcewoody2.4.6-2woody7DSA-688-1
squidsource(unstable)2.5.8-3
Search for package or bug name: Reporting problems