CVE-2005-0094
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and...
CVE-2005-0094 is a medium vulnerability (CVSS 5.0) in Squid, published January 15, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.63%, the 95th percentile. Fixed in squid 2.5.7-4.
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
- Record
CVE-2005-0094- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
- Record
CVE-2005-0094- Updated
- 2026-11-02
EUVDEUVD-2005-0095 No score
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
- Record
EUVD-2005-0095- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ph2m-29xw-r5gc No score
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and...
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
- Record
GHSA-ph2m-29xw-r5gc- Updated
- 2026-11-02
OSV No score
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
- Record
CVE-2005-0094- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0094 No score
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
- Record
DEBIAN-CVE-2005-0094- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidDebian:12 |
before 2.5.7-4 | 2.5.7-4 |
squidDebian:13 |
before 2.5.7-4 | 2.5.7-4 |
squidDebian:14 |
before 2.5.7-4 | 2.5.7-4 |
squidDebian:3.0 |
before 2.4.6-2woody5, plus listed versions 2.4.6-2woody4 |
2.4.6-2woody5 |
squidRed Hat:enterprise_linux:4::as |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::as |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:4::desktop |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::desktop |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:4::es |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::es |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
squidRed Hat:enterprise_linux:4::ws |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squid-debuginfoRed Hat:enterprise_linux:4::ws |
before 7:2.5.STABLE6-3.4E.3 | 7:2.5.STABLE6-3.4E.3 |
squidRed Hat:enterprise_linux:3::as |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::as |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::desktop |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::desktop |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::es |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::es |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squidRed Hat:enterprise_linux:3::ws |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
squid-debuginfoRed Hat:enterprise_linux:3::ws |
before 7:2.5.STABLE3-6.3E.7 | 7:2.5.STABLE3-6.3E.7 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000923
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11146
trustix.org/errata/2005/0003
squid-cache.org/Advisories/SQUID-2005_1.txt
fedoranews.org/updates/FEDORA--.shtml
securityfocus.com/bid/12276
Show 61 moreShow less
security.gentoo.org/glsa/glsa-200501-25.xml
debian.org/security/2005/dsa-651
redhat.com/support/errata/RHSA-2005-061.html
mandriva.com/security/advisories?name=MDKSA-2005:014
novell.com/linux/security/advisories/2005_06_squid.html
secunia.com/advisories/13825
nvd.nist.gov/vuln/detail/CVE-2005-0094
github.com/advisories/GHSA-ph2m-29xw-r5gc
security-tracker.debian.org/tracker/CVE-2005-0094
access.redhat.com/errata/RHSA-2005:060
bugzilla.redhat.com/show_bug.cgi?id=145545
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_060.json
cve.org/CVERecord?id=CVE-2005-0094