CVE-2025-54574
Squid's URN Handling can lead to Buffer Overflow
概要
Squid's URN Handling can lead to Buffer Overflow
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2025-54574 squid 修正版: 4.13-10+deb11u5
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web openwall.com
- web github.com
- web lists.debian.org