Unscored severity · published Sep 6, 2011
CVE-2011-3205
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote…
–
CVSS
27.5%
EPSS
No
On KEV
Description
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.
Exploitation
Is it being used?
Exploit prediction (EPSS)27.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
Squid · Squid-cache
3.0.stable1; 3.0.stable2; 3.0.stable3; 3.0.stable4; 3.0.stable5; 3.0.stable6; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3205
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3205
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065534.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00012.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00013.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html
openwall.com
http://openwall.com/lists/oss-security/2011/08/29/2
More from Squid
9.8
CVE-2025-54574
Squid is a caching proxy for the Web
9.8
CVE-2020-11945
An issue was discovered in Squid before 5.0.2
9.8
CVE-2019-12519
An issue was discovered in Squid through 4.7
9.8
CVE-2019-12524
An issue was discovered in Squid through 4.7
9.8
CVE-2019-12526
An issue was discovered in Squid before 4.9