CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in...
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
CVE-2025-59362- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2025-31363
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
EUVD-2025-31363- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jh85-mgr3-8f33
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in...
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
GHSA-jh85-mgr3-8f33- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N - Weakness
- CWE-121, CWE-172
- Updated
- 2026-11-02
NVD
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
CVE-2025-59362- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-121
- Updated
- 2026-11-06
OSVALPINE-CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
ALPINE-CVE-2025-59362- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
CVE-2025-59362- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-07
Show 17 moreShow less
OSVDEBIAN-CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
DEBIAN-CVE-2025-59362- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2025-2335
squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.
Security Fix(es):
Squid SNMP flaw lets attackers exploit a stack-based buffer overflow to execute arbitrary code or crash systems.(CVE-2025-59362)
- Record
OESA-2025-2335- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
UBUNTU-CVE-2025-59362- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVAZL-67808 No score
CVE-2025-59362 affecting package squid 5.7-5
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
AZL-67808- Updated
- 2026-11-02
OSVAZL-67850 No score
CVE-2025-59362 affecting package squid for versions less than 6.13-3
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
- Record
AZL-67850- Updated
- 2026-11-05
OSVCLSA-2026-1774622460 No score
squid: Fix of 3 CVEs
- CVE-2025-59362: fix ASN.1 encoding of long SNMP OIDs
- CVE-2026-33526: do not escape malformed URI twice when sending ICP errors
- CVE-2026-33515: fix validation of ICP packet sizes and URLs
- Record
CLSA-2026-1774622460- Updated
- 2026-11-02
OSVCLSA-2026-1775034352 No score
squid: Fix of CVE-2025-59362
- CVE-2025-59362: fix mishandling of ASN.1 encoding of long SNMP OIDs in lib/snmplib/asn1.c (asn_build_objid)
- Record
CLSA-2026-1775034352- Updated
- 2026-11-02
OSVMGASA-2026-0094 No score
Updated squid packages fix security vulnerabilities
Squid mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. (CVE-2025-59362) Squid vulnerable to information disclosure via authentication credential leakage in error handling. (CVE-2025-62168) Squid vulnerable to Denial of Service in ICP Request handling. (CVE-2026-33526) Squid has Denial of Service in ICP Response handling. (CVE-2026-32748) Squid has issues in ICP message handling. (CVE-2026-33515)
- Record
MGASA-2026-0094- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11069-1 No score
squid-7.6-1.1 on GA media
These are all security issues fixed in the squid-7.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11069-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20027-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281).
- CVE-2025-59362: SNMP message processing component of Squid Cache can lead to stack-based buffer overflow (bsc#1250627).
- Record
openSUSE-SU-2026:20027-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03521-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2025-59362: fixed buffer overflow (bsc#1250627)
- CVE-2024-37894: fixed denial of service in ESI processing (bsc#1227086)
- CVE-2024-33427: fixed possible buffer overread leading to denial of service (bsc#1225417)
- Record
SUSE-SU-2025:03521-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03606-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2025-59362: fixed buffer overflow (bsc#1250627)
- Record
SUSE-SU-2025:03606-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03607-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2025-59362: fixed buffer overflow (bsc#1250627)
- Record
SUSE-SU-2025:03607-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03627-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2025-59362: fixed buffer overflow (bsc#1250627)
- Record
SUSE-SU-2025:03627-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20078-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281).
- CVE-2025-59362: SNMP message processing component of Squid Cache can lead to stack-based buffer overflow (bsc#1250627).
- Record
SUSE-SU-2026:20078-1- Updated
- 2026-11-02
OSVUSN-7804-1 No score
squid vulnerability
It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service.
- Record
USN-7804-1- Updated
- 2026-11-02
OSVUSN-7804-2 No score
squid, squid3 vulnerability
USN-7804-1 fixed a vulnerability in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service.
- Record
USN-7804-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidAlpine:v3.23 |
before 7.3-r0 | 7.3-r0 |
squidAlpine:v3.24 |
before 7.3-r0 | 7.3-r0 |
squidAzure Linux:2 |
through 5.7-5 | None known |
squidAzure Linux:3 |
before 6.13-3 | 6.13-3 |
squidTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 7:5.5-5.el9_2.1.tuxcare.els11 | 7:5.5-5.el9_2.1.tuxcare.els11 |
squidTuxCare:AlmaLinux:9.6 |
before 7:5.5-19.el9_6.1.tuxcare.els2 | 7:5.5-19.el9_6.1.tuxcare.els2 |
squidDebian:12 |
before 5.7-2+deb12u5, plus listed versions 5.7-25.7-2+deb12u15.7-2+deb12u25.7-2+deb12u35.7-2+deb12u4 |
5.7-2+deb12u5 |
squidDebian:13 |
before 6.13-2+deb13u1, plus listed versions 6.13-2 |
6.13-2+deb13u1 |
squidDebian:14 |
before 7.2-1, plus listed versions 6.13-27.1-1 |
7.2-1 |
squidDebian:11 From an advisory covering 2 CVEs |
before 4.13-10+deb11u6, plus listed versions 4.13-104.13-10+deb11u14.13-10+deb11u24.13-10+deb11u34.13-10+deb11u44.13-10+deb11u5 |
4.13-10+deb11u6 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
squidMageia:9 From an advisory covering 5 CVEs |
before 5.9-1.5.mga9 | 5.9-1.5.mga9 |
squidopenEuler:22.03-LTS-SP4 |
before 4.9-28.oe2203sp4 | 4.9-28.oe2203sp4 |
squidopenEuler:24.03-LTS |
before 6.6-5.oe2403sp2 | 6.6-5.oe2403sp2 |
squidopenEuler:24.03-LTS-SP1 |
before 6.6-5.oe2403sp1 | 6.6-5.oe2403sp1 |
squidopenEuler:24.03-LTS-SP2 |
before 6.6-5.oe2403sp2 | 6.6-5.oe2403sp2 |
squidopenEuler:20.03-LTS-SP4 |
before 4.9-24.oe2003sp4 | 4.9-24.oe2003sp4 |
squidopenEuler:22.03-LTS-SP3 |
before 4.9-28.oe2203sp3 | 4.9-28.oe2203sp3 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidSUSE:Enterprise Storage 7.1 From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 6.10-150600.3.9.1 | 6.10-150600.3.9.1 |
squidSUSE:Linux Enterprise Module for Server Applications 15 SP7 |
before 6.10-150600.3.9.1 | 6.10-150600.3.9.1 |
squidopenSUSE:Leap 15.6 |
before 6.10-150600.3.9.1 | 6.10-150600.3.9.1 |
squidSUSE:Linux Enterprise Server 12 SP5-LTSS |
before 4.17-4.53.1 | 4.17-4.53.1 |
squidSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 4.17-4.53.1 | 4.17-4.53.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise Server 15 SP5-LTSS |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP5 |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Manager Proxy LTS 4.3 |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Manager Server LTS 4.3 |
before 5.7-150400.3.35.1 | 5.7-150400.3.35.1 |
squidSUSE:Linux Enterprise Server 16.0 From an advisory covering 2 CVEs |
before 6.12-160000.3.1 | 6.12-160000.3.1 |
squidSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 2 CVEs |
before 6.12-160000.3.1 | 6.12-160000.3.1 |
squid3Ubuntu:Pro:16.04:LTS |
before 3.5.12-1ubuntu7.16+esm6, plus listed versions 3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1 Show 20 moreShow less3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm13.5.12-1ubuntu7.16+esm23.5.12-1ubuntu7.16+esm33.5.12-1ubuntu7.16+esm43.5.12-1ubuntu7.16+esm5 |
3.5.12-1ubuntu7.16+esm6 |
squid3Ubuntu:Pro:18.04:LTS |
before 3.5.27-1ubuntu1.14+esm5, plus listed versions 3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2 Show 16 moreShow less3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.143.5.27-1ubuntu1.14+esm13.5.27-1ubuntu1.14+esm23.5.27-1ubuntu1.14+esm33.5.27-1ubuntu1.14+esm4 |
3.5.27-1ubuntu1.14+esm5 |
squidUbuntu:Pro:20.04:LTS |
before 4.10-1ubuntu1.13+esm2, plus listed versions 4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3 Show 16 moreShow less4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.74.10-1ubuntu1.84.10-1ubuntu1.94.10-1ubuntu1.104.10-1ubuntu1.114.10-1ubuntu1.124.10-1ubuntu1.134.10-1ubuntu1.13+esm1 |
4.10-1ubuntu1.13+esm2 |
squidUbuntu:22.04:LTS |
before 5.9-0ubuntu0.22.04.3, plus listed versions 4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.1 Show 8 moreShow less5.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.15.7-0ubuntu0.22.04.25.7-0ubuntu0.22.04.35.7-0ubuntu0.22.04.45.9-0ubuntu0.22.04.15.9-0ubuntu0.22.04.2 |
5.9-0ubuntu0.22.04.3 |
squidUbuntu:24.04:LTS |
before 6.13-0ubuntu0.24.04.2, plus listed versions 6.1-2ubuntu16.1-2ubuntu26.5-1ubuntu16.5-1ubuntu26.5-1ubuntu3 Show 5 moreShow less6.6-1ubuntu46.6-1ubuntu56.6-1ubuntu5.16.10-0ubuntu0.24.04.16.13-0ubuntu0.24.04.1 |
6.13-0ubuntu0.24.04.2 |
squidUbuntu:25.10 |
before 6.13-1ubuntu4, plus listed versions 6.13-1ubuntu16.13-1ubuntu26.13-1ubuntu3 |
6.13-1ubuntu4 |
squidopenSUSE:Tumbleweed |
before 7.6-1.1 | 7.6-1.1 |
squidopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 6.12-160000.3.1 | 6.12-160000.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | NVD | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-59362 is a medium vulnerability (CVSS 4.0) in Squid-cache Squid, published September 26, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in squid 7.3-r0.
References
github.com/squid-cache/squid/pull/2149
nvd.nist.gov/vuln/detail/CVE-2025-59362
security.alpinelinux.org/vuln/CVE-2025-59362
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1774622460.html
Show 27 moreShow less
security-tracker.debian.org/tracker/CVE-2025-59362
advisories.mageia.org/MGASA-2026-0094.html
bugs.mageia.org/show_bug.cgi?id=35271
openwall.com/lists/oss-security/2026/03/25/2
ubuntu.com/security/notices/USN-8157-1
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-2335
suse.com/support/update/announcement/2025/suse-su-202503521-1
bugzilla.suse.com/1225417
cve.org/CVERecord?id=CVE-2025-59362