Approved changes feed: RSS · Atom

cpe:2.3:a:squid:squid:2.5.stable8:*:*:*:*:*:*:*

part: a version: 2.5.stable8 update: *

VendorSquid (9786aba4-bb5c-533f-8bac-ba68903a8677)
ProductSquid (64869af5-807b-5058-9ba3-08565b79d416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:16:52.961997
pkg:gitlab/redhat/squid purl2cpe 2026-06-01 10:16:52.961999

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3258 vulnerable 2026-06-08 04:48:40.079006 Details available
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Published: 2005-10-20T04:00:00.000Z
Updated: 2024-08-07T23:01:59.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2796 vulnerable 2026-06-08 04:48:30.585344 Details available
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
Published: 2005-09-07T04:00:00.000Z
Updated: 2024-08-07T22:45:02.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2794 vulnerable 2026-06-08 04:48:30.572930 Details available
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Published: 2005-09-07T04:00:00.000Z
Updated: 2024-08-07T22:45:02.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1345 vulnerable 2026-06-08 04:48:26.424837 Details available
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
Published: 2005-04-28T04:00:00.000Z
Updated: 2024-08-07T21:44:06.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0446 vulnerable 2026-06-08 04:48:12.675613 Details available
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Published: 2005-02-15T05:00:00.000Z
Updated: 2024-08-07T21:13:54.267Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.