CVE-2011-3205

Squid 3.0-3.0.STABLE25, 3.1-3.1.14, 3.2-3.2.0.10 - Buffer Overflow in Gopher Reply Parser

Title source: llm

Description

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.

References (25)

Core 25

Core References

Various Sources x_refsource_confirm

http://www.squid-cache.org/Advisories/SQUID-2011_3.txt

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-1293.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/46029

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/45906

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065534.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00013.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1025981

Patch x_refsource_confirm

http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9193.patch

Patch x_refsource_confirm

http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10363.patch

Patch x_refsource_confirm

http://www.squid-cache.org/Versions/v2/2.HEAD/changesets/12710.patch

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/45965

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/45805

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2011/dsa-2304

Mailing List mailing-list x_refsource_mlist

http://openwall.com/lists/oss-security/2011/08/30/8

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00012.html

Mailing List mailing-list x_refsource_mlist

http://openwall.com/lists/oss-security/2011/08/29/2

Patch x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=734583

Mailing List mailing-list x_refsource_mlist

http://openwall.com/lists/oss-security/2011/08/30/4

Patch x_refsource_confirm

http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11294.patch

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/49356

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/74847

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/45920

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2011:150

Scores

EPSS 0.2745

EPSS Percentile 97.9%

Details

Status published

Products (48)

squid-cache/squid 3.0.stable1

squid-cache/squid 3.0.stable2

squid-cache/squid 3.0.stable3

squid-cache/squid 3.0.stable4

squid-cache/squid 3.0.stable5

squid-cache/squid 3.0.stable6

squid-cache/squid 3.0.stable7

squid-cache/squid 3.0.stable8

squid-cache/squid 3.0.stable9

squid-cache/squid 3.0.stable10

... and 38 more

Published Sep 06, 2011

Tracked Since Feb 18, 2026