CVE-2011-3205
squid: buffer overflow flaw in Squid's Gopher reply parser (SQUID-2011:3)
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.
Desbordamiento de búfer en la v3.0 anterior a v3.0.STABLE26, v3.1 anterior a v3.1.15, y v3.2 anterior a v3.2.0.11 permite a servidores remotos Gopher provocar una denegación de servicio (corrupción de memoria y reinicio del demonio) o posiblemente tener un impacto no especificado a través de una respuesta demasiado larga. NOTA: Este problema existe debido a una regresión de CVE-2005-0094.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-08-19 CVE Reserved
- 2011-09-06 CVE Published
- 2024-08-04 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (26)
| URL | Tag | Source |
|---|---|---|
| http://openwall.com/lists/oss-security/2011/08/29/2 | Mailing List | |
| http://openwall.com/lists/oss-security/2011/08/30/4 | Mailing List | |
| http://openwall.com/lists/oss-security/2011/08/30/8 | Mailing List | |
| http://secunia.com/advisories/45906 | Third Party Advisory | |
| http://secunia.com/advisories/45920 | Third Party Advisory | |
| http://secunia.com/advisories/45965 | Third Party Advisory | |
| http://secunia.com/advisories/46029 | Third Party Advisory | |
| http://securitytracker.com/id?1025981 | Vdb Entry | |
| http://www.osvdb.org/74847 | Vdb Entry | |
| http://www.securityfocus.com/bid/49356 | Vdb Entry | |
| http://www.squid-cache.org/Advisories/SQUID-2011_3.txt | X_refsource_confirm |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable1 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable2 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable3 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable4 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable5 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable6 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable7 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable8 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable9 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable10 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable11 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable11 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable11" | rc1 |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable12 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable13 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable14 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable15 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable15" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable16 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable16" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable16 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable16" | rc1 |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable17 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable17" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable18 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable18" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable19 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable19" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable20 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable20" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable21 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable21" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable22 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable22" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable23 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable23" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable24 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable24" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.0.stable25 Search vendor "Squid-cache" for product "Squid" and version "3.0.stable25" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1 Search vendor "Squid-cache" for product "Squid" and version "3.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.4 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.5 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.6 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.7 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.8 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.9 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.10 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.11 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.12 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.13 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.14 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.15 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.15" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.16 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.16" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.17 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.17" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.0.18 Search vendor "Squid-cache" for product "Squid" and version "3.1.0.18" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.2 Search vendor "Squid-cache" for product "Squid" and version "3.1.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.3 Search vendor "Squid-cache" for product "Squid" and version "3.1.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.4 Search vendor "Squid-cache" for product "Squid" and version "3.1.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.5 Search vendor "Squid-cache" for product "Squid" and version "3.1.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.5.1 Search vendor "Squid-cache" for product "Squid" and version "3.1.5.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.6 Search vendor "Squid-cache" for product "Squid" and version "3.1.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.7 Search vendor "Squid-cache" for product "Squid" and version "3.1.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.8 Search vendor "Squid-cache" for product "Squid" and version "3.1.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.9 Search vendor "Squid-cache" for product "Squid" and version "3.1.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.10 Search vendor "Squid-cache" for product "Squid" and version "3.1.10" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.11 Search vendor "Squid-cache" for product "Squid" and version "3.1.11" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.12 Search vendor "Squid-cache" for product "Squid" and version "3.1.12" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.13 Search vendor "Squid-cache" for product "Squid" and version "3.1.13" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.1.14 Search vendor "Squid-cache" for product "Squid" and version "3.1.14" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.1 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.1" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.2 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.2" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.3 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.3" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.4 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.4" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.5 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.5" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.6 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.6" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.7 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.7" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.8 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.8" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.9 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.9" | - |
Affected
| ||||||
| Squid-cache Search vendor "Squid-cache" | Squid Search vendor "Squid-cache" for product "Squid" | 3.2.0.10 Search vendor "Squid-cache" for product "Squid" and version "3.2.0.10" | - |
Affected
| ||||||