CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote...
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
Exploit likelihood
What each source reports
NVD Score used
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
- Record
CVE-2005-2796- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
- Record
CVE-2005-2796- Updated
- 2026-11-02
EUVDEUVD-2005-2797No score
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
- Record
EUVD-2005-2797- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q53j-wvv4-p6jqNo score
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote...
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
- Record
GHSA-q53j-wvv4-p6jq- Updated
- 2026-11-02
OSVNo score
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
- Record
CVE-2005-2796- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2796No score
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
- Record
DEBIAN-CVE-2005-2796- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidDebian:12 | before 2.5.10-5 | 2.5.10-5 |
squidDebian:13 | before 2.5.10-5 | 2.5.10-5 |
squidDebian:14 | before 2.5.10-5 | 2.5.10-5 |
squidDebian:3.1 From an advisory covering 2 CVEs | before 2.5.9-10sarge1, plus listed versions 2.5.9-10 | 2.5.9-10sarge1 |
squidRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
squid-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
squidRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
squid-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
squidRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
squid-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
squidRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
squid-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 7:2.5.STABLE3-6.3E.14 | 7:2.5.STABLE3-6.3E.14 |
squidRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
squid-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
squidRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
squid-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
squidRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
squid-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
squidRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
squid-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 7:2.5.STABLE6-3.4E.11 | 7:2.5.STABLE6-3.4E.11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2796 is a medium vulnerability (CVSS 5.0) in Squid, published September 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.83%, the 94th percentile. Fixed in squid 2.5.10-5.
References
securityfocus.com/bid/14731
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10522
mandriva.com/security/advisories?name=MDKSA-2005:162
securitytracker.com/id?1014846
debian.org/security/2005/dsa-809
novell.com/linux/security/advisories/2005_53_squid.html
Show 30 moreShow less
fedoranews.org/updates/FEDORA--.shtml
gentoo.org/security/en/glsa/glsa-200509-06.xml
squid-cache.org/Versions/v2/2.5/bugs
redhat.com/support/errata/RHSA-2005-766.html
secunia.com/advisories/17027
nvd.nist.gov/vuln/detail/CVE-2005-2796
github.com/advisories/GHSA-q53j-wvv4-p6jq
security-tracker.debian.org/tracker/CVE-2005-2796
access.redhat.com/errata/RHSA-2005:766
bugzilla.redhat.com/show_bug.cgi?id=166520
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_766.json
cve.org/CVERecord?id=CVE-2004-2479