Skip to content
OpenAdvisories
Unscored RHSA-2005:415 5 CVEs

Red Hat Security Advisory: squid security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as squid 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 3 enterprise_linux:3::as squid-debuginfo 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 3 enterprise_linux:3::desktop squid 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 3 enterprise_linux:3::desktop squid-debuginfo 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 3 enterprise_linux:3::es squid 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 3 enterprise_linux:3::es squid-debuginfo 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 3 enterprise_linux:3::ws squid 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 3 enterprise_linux:3::ws squid-debuginfo 7:2.5.STABLE3-6.3E.13
Red Hat · RHEL 4 enterprise_linux:4::as squid 7:2.5.STABLE6-3.4E.9
Red Hat · RHEL 4 enterprise_linux:4::as squid-debuginfo 7:2.5.STABLE6-3.4E.9
Red Hat · RHEL 4 enterprise_linux:4::desktop squid 7:2.5.STABLE6-3.4E.9
Red Hat · RHEL 4 enterprise_linux:4::desktop squid-debuginfo 7:2.5.STABLE6-3.4E.9
Red Hat · RHEL 4 enterprise_linux:4::es squid 7:2.5.STABLE6-3.4E.9
Red Hat · RHEL 4 enterprise_linux:4::es squid-debuginfo 7:2.5.STABLE6-3.4E.9
Red Hat · RHEL 4 enterprise_linux:4::ws squid 7:2.5.STABLE6-3.4E.9
Red Hat · RHEL 4 enterprise_linux:4::ws squid-debuginfo 7:2.5.STABLE6-3.4E.9

Vulnerabilities 5

  • Unscored —
    CVE-1999-0710 Public exploit EPSS 12%

    The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web director…

    squid Debian
  • Unscored —
    CVE-2005-0626

    Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling coo…

    squid Debian
  • Unscored —
    CVE-2005-0718 EPSS 13%

    Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the…

    squid Debian
  • Unscored —
    CVE-2005-1345

    Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_acc…

    squid Debian
  • Unscored —
    CVE-2005-1519

    Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing,…

    squid Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=125007
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=150232
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=150907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=151412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=151423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=156161
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=157455
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_415.json
  • report
    https://access.redhat.com/security/cve/CVE-1999-0710
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1616452
  • advisory
    https://www.cve.org/CVERecord?id=CVE-1999-0710
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-1999-0710
  • report
    https://access.redhat.com/security/cve/CVE-2005-0626
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617553
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0626
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0626
  • report
    https://access.redhat.com/security/cve/CVE-2005-0718
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617563
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0718
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0718
  • report
    https://access.redhat.com/security/cve/CVE-2005-1345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617631
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1345
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1345
  • report
    https://access.redhat.com/security/cve/CVE-2005-1519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617653
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1519
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1519