CVE-2025-54574
Squid's URN Handling can lead to Buffer Overflow
Résumé
Squid's URN Handling can lead to Buffer Overflow
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-54574 squid Corrigé dans: 4.13-10+deb11u5
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web openwall.com
- web github.com
- web lists.debian.org