CVE-2005-0094
squid - buffer overflow, integer overflow
EPSS 8.6%
Description
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
How to fix CVE-2005-0094
To remediate CVE-2005-0094, upgrade the affected package to a fixed version below.
- Debian/squid—upgrade to 2.5.7-4 or later
- Debian/squid—upgrade to 2.4.6-2woody5 or later
Is CVE-2005-0094 being exploited?
Moderate — EPSS is 8.6%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- from 0, < 2.5.7-4
- from 0, < 2.4.6-2woody5