CVE-2005-2794

Published: Sep 7, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.

Affected (42)

Products: Squid: Squid

1 product

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Squid Squid	Version 2.0.patch1
Squid Squid	Version 2.0.patch2
Squid Squid	Version 2.0.pre1
Squid Squid	Version 2.0.release
Squid Squid	Version 2.1.patch1
Squid Squid	Version 2.1.patch2
Squid Squid	Version 2.1.pre1
Squid Squid	Version 2.1.pre3
Squid Squid	Version 2.1.pre4
Squid Squid	Version 2.1.release
Squid Squid	Version 2.2.devel3
Squid Squid	Version 2.2.devel4
Squid Squid	Version 2.2.pre1
Squid Squid	Version 2.2.pre2
Squid Squid	Version 2.2.stable1
Squid Squid	Version 2.2.stable2
Squid Squid	Version 2.2.stable3
Squid Squid	Version 2.2.stable4
Squid Squid	Version 2.2.stable5
Squid Squid	Version 2.3.devel2
Squid Squid	Version 2.3.devel3
Squid Squid	Version 2.3.stable1
Squid Squid	Version 2.3.stable2
Squid Squid	Version 2.3.stable3
Squid Squid	Version 2.3.stable4
Squid Squid	Version 2.3.stable5
Squid Squid	Version 2.4.stable1
Squid Squid	Version 2.4.stable2
Squid Squid	Version 2.4.stable3
Squid Squid	Version 2.4.stable4
Squid Squid	Version 2.4.stable6
Squid Squid	Version 2.4.stable7
Squid Squid	Version 2.5.stable10
Squid Squid	Version 2.5.stable1
Squid Squid	Version 2.5.stable2
Squid Squid	Version 2.5.stable3
Squid Squid	Version 2.5.stable4
Squid Squid	Version 2.5.stable5
Squid Squid	Version 2.5.stable6
Squid Squid	Version 2.5.stable7
Squid Squid	Version 2.5.stable8
Squid Squid	Version 2.5.stable9

References (24)

http://fedoranews.org/updates/FEDORA--.shtml

Source: secalert@redhat.com

http://secunia.com/advisories/16977

Source: secalert@redhat.com

http://secunia.com/advisories/17027

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-809

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:162

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_21_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_53_squid.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-766.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14761

Source: secalert@redhat.com

http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-STORE_PENDING

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10276

Source: secalert@redhat.com

http://fedoranews.org/updates/FEDORA--.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/16977

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17027

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-809

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:162

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_21_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_53_squid.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-766.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14761

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-STORE_PENDING

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10276

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.