CVE-2025-54574
Squid's URN Handling can lead to Buffer Overflow
Summary
Squid's URN Handling can lead to Buffer Overflow
Original description
The description as published by the source.
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-54574 squid Fixed in: 4.13-10+deb11u5
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web openwall.com
- web github.com
- web lists.debian.org