Skip to content
fr Sign in
9.3 Critical

CVE-2025-54574 Squid is a caching proxy for the Web

Description

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Affected products and versions

Product Affected versions Fixed in
squid 6.4 earliest → < 6.4 6.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of squid

The 19 CVEs of squid →
CVE-2026-61642 Squid is a caching proxy for the Web 7.7 High CVE-2026-47729 Squid is a caching proxy for the Web 6.5 Medium CVE-2026-50012 Squid is a caching proxy for the Web 5.5 Medium CVE-2026-33526 Squid is a caching proxy for the Web 9.2 Critical
Track this CVE