VULNERABILITY INTELLIGENCE

CVE-2025-54574

CVSS score9.3 CRITICAL
EPSS probability23.96%
CISA KEVNot currently listed
Published2025-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H

Description

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Weakness classification

  • CWE-122: Heap-based Buffer Overflow
  • CWE-787: Out-of-bounds Write

Primary references