CVE-2005-0095

描述

The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.

如何修補 CVE-2005-0095

要修補 CVE-2005-0095,請將受影響套件升級到下列已修補版本。

• Debian/squid—升級至 2.5.7-4 或更新版本

CVE-2005-0095 正在被利用嗎?

可能 — EPSS 為 68.8%,屬於高被利用機率區間,建議優先修補。

受影響套件(1)

• from 0, < 2.5.7-4

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-0095