CVE-2005-0211: debian debian_linux

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2005-0211

Published 06-02-2005Last modified 07-08-2024

Vulnerability summary

CVE-2005-0211 is a high (CVSS 7.5) vulnerability in debian debian_linux. EPSS estimates a 22.15% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

22.15%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3

DSA-667-1 RHSA-2005:060 RHSA-2005:061

Timeline

06-02-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

22.15%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 22.15% on 19-09-2026

19-09-202619-10-2026

EPSS score

22.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Debian2 products

squid< 2.5.7-6
debian_linuxEOL3.0

Squid-cache1 product

squidEOL2.5.stable1 | 2.5.stable2 | 2.5.stable3 | 2.5.stable4 | 2.5.stable5 | 2.5.stable6

2 vendors · 3 products

References

16 links

securitytracker.com/id?1013045VDB EntryX Refsource SECTRACKThird Party Advisory
www.osvdb.org/13319VDB EntryX Refsource OSVDBBroken Link
www.kb.cert.org/vuls/id/886006Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
secunia.com/advisories/14076Third Party AdvisoryX Refsource SECUNIAPermissions Required
fedoranews.org/updates/FEDORA--.shtmlVendor AdvisoryX Refsource FEDORABroken Link
www.securityfocus.com/bid/12432VDB EntryX Refsource BIDThird Party Advisory
www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patchX Refsource CONFIRMPatchVendor Advisory
www.redhat.com/support/errata/RHSA-2005-061.htmlVendor AdvisoryX Refsource REDHATNot ApplicableThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573VDB EntrySignatureX Refsource OVALThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2005:034Vendor AdvisoryX Refsource MANDRAKEBroken Link

Show all 16 references

www.debian.org/security/2005/dsa-667Vendor AdvisoryX Refsource DEBIANPatchThird Party Advisory
marc.info?l=bugtraq&m=110780531820947&w=2Mailing ListX Refsource BUGTRAQThird Party Advisory
www.novell.com/linux/security/advisories/2005_06_squid.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.redhat.com/support/errata/RHSA-2005-060.htmlVendor AdvisoryX Refsource REDHATNot ApplicableThird Party Advisory
www.squid-cache.org/Versions/v2/2.5/bugs/X Refsource CONFIRMPatchVendor Advisory
security-tracker.debian.org/tracker/CVE-2005-0211Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities