Approved changes feed: RSS · Atom

cpe:2.3:a:squid:squid:2.5_stable9:*:*:*:*:*:*:*

part: a version: 2.5_stable9 update: *

VendorSquid (9786aba4-bb5c-533f-8bac-ba68903a8677)
ProductSquid (64869af5-807b-5058-9ba3-08565b79d416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:16:52.964670
pkg:gitlab/redhat/squid purl2cpe 2026-06-01 10:16:52.964672

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2796 vulnerable 2026-06-08 04:48:30.590423 Details available
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
Published: 2005-09-07T04:00:00.000Z
Updated: 2024-08-07T22:45:02.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0718 vulnerable 2026-06-08 04:48:13.451804 Details available
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
Published: 2005-03-12T05:00:00.000Z
Updated: 2024-08-07T21:21:06.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0446 vulnerable 2026-06-08 04:48:12.675797 Details available
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Published: 2005-02-15T05:00:00.000Z
Updated: 2024-08-07T21:13:54.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0175 vulnerable 2026-06-08 04:48:11.572723 Details available
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
Published: 2005-02-06T05:00:00.000Z
Updated: 2024-08-07T21:05:25.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0174 vulnerable 2026-06-08 04:48:11.571865 Details available
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
Published: 2005-02-06T05:00:00.000Z
Updated: 2024-08-07T21:05:25.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0097 vulnerable 2026-06-08 04:48:11.333717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0096 vulnerable 2026-06-08 04:48:11.332819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0095 vulnerable 2026-06-08 04:48:11.331799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0094 vulnerable 2026-06-08 04:48:11.329902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.