Approved changes feed: RSS · Atom
cpe:2.3:a:squid:squid:2.5_.stable5:*:*:*:*:*:*:*
part: a version: 2.5_.stable5 update: *
| Vendor | Squid (9786aba4-bb5c-533f-8bac-ba68903a8677) |
|---|---|
| Product | Squid (64869af5-807b-5058-9ba3-08565b79d416) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:16:52.957345 |
pkg:gitlab/redhat/squid |
purl2cpe | 2026-06-01 10:16:52.957347 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-2796 |
vulnerable | 2026-06-08 04:48:30.588496 |
Details available
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
Published: 2005-09-07T04:00:00.000Z
Updated: 2024-08-07T22:45:02.280Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0718 |
vulnerable | 2026-06-08 04:48:13.451735 |
Details available
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
Published: 2005-03-12T05:00:00.000Z
Updated: 2024-08-07T21:21:06.764Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0446 |
vulnerable | 2026-06-08 04:48:12.675729 |
Details available
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Published: 2005-02-15T05:00:00.000Z
Updated: 2024-08-07T21:13:54.267Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0175 |
vulnerable | 2026-06-08 04:48:11.572528 |
Details available
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
Published: 2005-02-06T05:00:00.000Z
Updated: 2024-08-07T21:05:25.487Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0174 |
vulnerable | 2026-06-08 04:48:11.571800 |
Details available
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
Published: 2005-02-06T05:00:00.000Z
Updated: 2024-08-07T21:05:25.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0097 |
vulnerable | 2026-06-08 04:48:11.333654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0096 |
vulnerable | 2026-06-08 04:48:11.332757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0095 |
vulnerable | 2026-06-08 04:48:11.331736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0094 |
vulnerable | 2026-06-08 04:48:11.327994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0918 |
vulnerable | 2026-06-08 04:47:51.925249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.