CVE-2005-2794

9 documents8 sources
Severity
5.0MEDIUM
EPSS
12.5%
top 6.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 7
Latest updateMay 1

Description

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

Debiansquid< 2.5.10-5+3
NVDsquid/squid42 versions+41

🔴Vulnerability Details

3
GHSA
GHSA-35c5-gf3h-p2c7: store2022-05-01
OSV
CVE-2005-2794: store2005-09-07
CVEList
CVE-2005-2794: store2005-09-07

📋Vendor Advisories

3
Ubuntu
Squid vulnerabilities2005-09-13
Red Hat
security flaw2005-09-01
Debian
CVE-2005-2794: squid - store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a den...2005

💬Community

2
Bugzilla
CVE-2005-2794 security flaw2018-08-16
Bugzilla
Squid Multiple Vulnerabilities (CVE-2004-0541 CVE-2004-0832 CVE-2004-0918 CVE-2005-0094 CVE-2005-0095 CVE-2005-0096 CVE-2005-0097 CVE-2005-0446 CVE-2005-0626 CVE-2005-0718 CVE-1999-0710 CVE-2005-13452004-10-11