CVE-2011-3205: squid-cache squid

CVSS: 6.8v2.0MediumModified

AliasesRHSA-2011:1293DSA-2304-1

Published 06-09-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-3205 is a medium (CVSS 6.8) vulnerability in squid-cache squid. EPSS estimates a 27.45% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

27.45%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

SUSE-SU-2016:2089-1

Timeline

06-09-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

27.45%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 27.45% on 20-09-2026

20-09-202620-10-2026

EPSS score

27.45%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat2 products

squid< 7:3.1.10-1.el6_1.1
squid-debuginfo< 7:3.1.10-1.el6_1.1

Debian1 product

squid3< 3.1.6-1.2+squeeze1 | < 3.0.STABLE8-3+lenny5

Squid-cache1 product

squidEOL3.0.stable1 | 3.0.stable2 | 3.0.stable3 | 3.0.stable4 | 3.0.stable5 | 3.0.stable6 | 3.0.stable7 | 3.0.stable8 | 3.0.stable9 | 3.0.stable10 | 3.0.stable11 | 3.0.stable11:rc1 | 3.0.stable12 | 3.0.stable13 | 3.0.stable14 | 3.0.stable15 | 3.0.stable16 | 3.0.stable16:rc1 | 3.0.stable17 | 3.0.stable18 | 3.0.stable19 | 3.0.stable20 | 3.0.stable21 | 3.0.stable22 | 3.0.stable23 | 3.0.stable24 | 3.0.stable25 | 3.1 | 3.1.0.1 | 3.1.0.2 | 3.1.0.3 | 3.1.0.4 | 3.1.0.5 | 3.1.0.6 | 3.1.0.7 | 3.1.0.8 | 3.1.0.9 | 3.1.0.10 | 3.1.0.11 | 3.1.0.12 | 3.1.0.13 | 3.1.0.14 | 3.1.0.15 | 3.1.0.16 | 3.1.0.17 | 3.1.0.18 | 3.1.1 | 3.1.2 | 3.1.3 | 3.1.4 | 3.1.5 | 3.1.5.1 | 3.1.6 | 3.1.7 | 3.1.8 | 3.1.9 | 3.1.10 | 3.1.11 | 3.1.12 | 3.1.13 | 3.1.14 | 3.2.0.1 | 3.2.0.2 | 3.2.0.3 | 3.2.0.4 | 3.2.0.5 | 3.2.0.6 | 3.2.0.7 | 3.2.0.8 | 3.2.0.9 | 3.2.0.10

3 vendors · 4 products