Squid: >> Squid >> 2.5.stable8 Security Vulnerabilities
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
CVSS Score
5.0
EPSS Score
0.338
Published
2005-10-20
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
CVSS Score
5.0
EPSS Score
0.125
Published
2005-09-07
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
CVSS Score
5.0
EPSS Score
0.151
Published
2005-09-07
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
CVSS Score
5.0
EPSS Score
0.659
Published
2005-05-02
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
CVSS Score
7.5
EPSS Score
0.002
Published
2005-05-02