CVE-2025-54574

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

CVSS v3 9.3 CRITICAL

9.3^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988	Patch
https://github.com/squid-cache/squid/releases/tag/SQUID_6_4	Release Notes
https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3	Mitigation Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/11/05/5
https://lists.debian.org/debian-lts-announce/2025/09/msg00027.html

Configurations

Configuration 1 (hide)

cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*

History

05 Nov 2025, 17:15

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2025/11/05/5 - () https://lists.debian.org/debian-lts-announce/2025/09/msg00027.html -
References	~~() https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3 - Patch, Vendor Advisory, Mitigation~~	() https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3 - Mitigation, Patch, Vendor Advisory

Information

Published : 2025-08-01 18:15

Updated : 2025-11-05 17:15

NVD link : CVE-2025-54574

Mitre link : CVE-2025-54574

CVE.ORG link : CVE-2025-54574

JSON object : View

Products Affected

squid-cache

squid

CWE

CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write

{"id": "CVE-2025-54574", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.7, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-08-01T18:15:55.390", "references": [{"url": "https://github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988", "tags": ["Patch"], "source": "[email protected]"}, {"url": "https://github.com/squid-cache/squid/releases/tag/SQUID_6_4", "tags": ["Release Notes"], "source": "[email protected]"}, {"url": "https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "source": "[email protected]"}, {"url": "http://www.openwall.com/lists/oss-security/2025/11/05/5", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00027.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-122"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions."}, {"lang": "es", "value": "Squid es un proxy de cach\u00e9 para la web. En las versiones 6.3 y anteriores, Squid es vulnerable a un desbordamiento del b\u00fafer de mont\u00f3n y a posibles ataques de ejecuci\u00f3n remota de c\u00f3digo al procesar URN debido a una gesti\u00f3n incorrecta del b\u00fafer. Esto se ha corregido en la versi\u00f3n 6.4. Para solucionar este problema, deshabilite los permisos de acceso a URN."}], "lastModified": "2025-11-05T17:15:43.620", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D384D1F-2A05-4EE0-9CB8-C83FDC53F608", "versionEndExcluding": "6.4"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}