Every CVE Search/ Get API key

CVE-2025-62168

Squid vulnerable to information disclosure via authentication credential leakage in error handling

10.0 CriticalPublic exploitFix available

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

64.8%Up 64.6 points since Oct 18, 2025
90%50%10%1%

What each source reports

CVE List Score used 10.0

Squid vulnerable to information disclosure via authentication credential leakage in error handling

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
CVE-2025-62168
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-209, CWE-550
Updated
2026-11-02
EUVDEUVD-2025-34894 10.0

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
EUVD-2025-34894
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
NVD 10.0

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
CVE-2025-62168
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-209, CWE-550
Updated
2026-11-02
OSVALPINE-CVE-2025-62168 7.5

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
ALPINE-CVE-2025-62168
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSV 10.0

Squid vulnerable to information disclosure via authentication credential leakage in error handling

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
CVE-2025-62168
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-209, CWE-550
Updated
2026-11-02
OSVDEBIAN-CVE-2025-62168 7.5

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
DEBIAN-CVE-2025-62168
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 47 moreShow less
OSVOESA-2025-2531 10.0

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2025-2531
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2606 10.0

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2025-2606
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2607 10.0

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2025-2607
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2026-1164 9.8

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2026-1164
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1165 9.8

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2026-1165
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1551 9.8

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2026-1551
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19107 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2025:19107
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:19114 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:19114
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:19115 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:19115
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:19118 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:19118
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:19167 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:19167
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:19277 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2025:19277
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:19398 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2025:19398
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:19967 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2025:19967
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:20935 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:20935
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:21002 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:21002
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:21065 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:21065
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:21066 8.6

Red Hat Security Advisory: squid security update

Record
RHSA-2025:21066
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:21090 8.6

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2025:21090
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2025:19107 8.6

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

  • squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:19107
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2025:20935 8.6

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

  • squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:20935
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2025:21002 8.6

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

  • squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21002
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-62168 10.0

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
UBUNTU-CVE-2025-62168
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2025:19107 No score

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

  • squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19107
Updated
2026-11-02
OSVALSA-2025:20935 No score

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

  • squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:20935
Updated
2026-11-02
OSVALSA-2025:21002 No score

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

  • squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21002
Updated
2026-11-02
OSVAZL-68562 No score

CVE-2025-62168 affecting package squid for versions less than 6.13-3

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
AZL-68562
Updated
2026-11-05
OSVAZL-68589 No score

CVE-2025-62168 affecting package squid 5.7-5

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Record
AZL-68589
Updated
2026-11-02
OSVCLSA-2025-1763024537 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
Record
CLSA-2025-1763024537
Updated
2026-11-02
OSVCLSA-2025-1763031041 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
Record
CLSA-2025-1763031041
Updated
2026-11-02
OSVCLSA-2025-1763124681 No score

Fix CVE(s): CVE-2025-62168

  • SECURITY UPDATE: information disclosure vulnerability in error handling
    • debian/patches/CVE-2025-62168.patch: Fix HttpRequest::pack function to handle sensitive data by including a parameter for masking sensitive information
    • CVE-2025-62168
Record
CLSA-2025-1763124681
Updated
2026-11-02
OSVCLSA-2025-1763370812 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
Record
CLSA-2025-1763370812
Updated
2026-11-02
OSVCLSA-2025-1763388821 No score

squid34: Fix of CVE-2025-62168

  • CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure
Record
CLSA-2025-1763388821
Updated
2026-11-02
OSVCLSA-2025-1763397982 No score

squid34: Fix of CVE-2025-62168

  • CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure
Record
CLSA-2025-1763397982
Updated
2026-11-02
OSVCLSA-2025-1763413374 No score

Fix CVE(s): CVE-2025-62168

  • SECURITY UPDATE: information disclosure in error handling
    • debian/patches/CVE-2025-62168.patch: Fix bug where proxy auth data was visible to scripts by redacting credentials from error page code expansion output and email links
    • CVE-2025-62168
Record
CLSA-2025-1763413374
Updated
2026-11-02
OSVCLSA-2025-1763467263 No score

Fix CVE(s): CVE-2025-62168

  • SECURITY UPDATE: information disclosure via HTTP authentication credentials
    • debian/patches/CVE-2025-62168.patch: Fix bug causing visibility of proxy auth data to scripts by redacting credentials from error page code expansion output and mailto link generation
    • CVE-2025-62168
Record
CLSA-2025-1763467263
Updated
2026-11-02
OSVCLSA-2025-1763478867 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
Record
CLSA-2025-1763478867
Updated
2026-11-02
OSVCLSA-2025-1763490076 No score

Fix CVE(s): CVE-2025-62168

  • SECURITY UPDATE: failure to redact HTTP authentication credentials in error handling allows information disclosure
    • debian/patches/CVE-2025-62168.patch: Fix HttpRequest::pack to mask sensitive information to prevent disclosure
    • CVE-2025-62168
Record
CLSA-2025-1763490076
Updated
2026-11-02
OSVCLSA-2025-1763543346 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
Record
CLSA-2025-1763543346
Updated
2026-11-02
OSVCLSA-2025-1763717278 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix redaction failure to prevent information disclosure in error handling
Record
CLSA-2025-1763717278
Updated
2026-11-02
OSVCLSA-2025-1764151964 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
  • email_err_data directive now defaults to 'off' for security (previously 'on')
Record
CLSA-2025-1764151964
Updated
2026-11-02
OSVCLSA-2025-1764152160 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
  • email_err_data directive now defaults to 'off' for security (previously 'on')
Record
CLSA-2025-1764152160
Updated
2026-11-02
OSVCLSA-2025-1764281284 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure
  • email_err_data directive now defaults to 'off' for security (previously 'on')
Record
CLSA-2025-1764281284
Updated
2026-11-02
OSVCLSA-2025-1764681009 No score

squid: Fix of CVE-2025-62168

  • CVE-2025-62168: fix redaction failure to prevent information disclosure in error handling
Record
CLSA-2025-1764681009
Updated
2026-11-02
OSVCLSA-2026-1790775234 No score

squid: Fix of CVE-2025-62168

  • Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13
  • CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9
  • Deny URN requests in the default squid.conf (upstream workaround), from Oracle 17.0.7
Record
CLSA-2026-1790775234
Updated
2026-11-02
OSVCLSA-2026-1790851347 No score

squid: Fix of 5 CVEs

  • Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13
  • CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9
  • Deny URN requests in the default squid.conf (upstream workaround), from Oracle 17.0.7
Record
CLSA-2026-1790851347
Updated
2026-11-02
OSVCLSA-2026-1790852342 No score

squid: Fix of 4 CVEs

  • Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13
  • CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9
  • Deny URN requests in the default squid.conf (upstream workaround), from Oracle 17.0.7
Record
CLSA-2026-1790852342
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
squid
Alpine:v3.23
 before 7.3-r0
7.3-r0
squid
Alpine:v3.24
 before 7.3-r0
7.3-r0
libecap
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
libecap-devel
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap-devel
AlmaLinux:8
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
squid
AlmaLinux:8
 before 7:4.15-10.module_el8.10.0+4055+645078d8.9
7:4.15-10.module_el8.10.0+4055+645078d8.9
squid
AlmaLinux:9
 before 7:5.5-22.el9_7.1
7:5.5-22.el9_7.1
squid
AlmaLinux:10
 before 7:6.10-6.el10_1.1
7:6.10-6.el10_1.1
squid
Azure Linux:3
 before 6.13-3
6.13-3
Show 188 moreShow less
Affected packages
PackageAffectedFixed
squid
Azure Linux:2
 through 5.7-5 None known
squid
TuxCare:CentOS:8.5
 before 7:4.15-1.module_el8.5.0+2313+eb714ac0.tuxcare.els14
7:4.15-1.module_el8.5.0+2313+eb714ac0.tuxcare.els14
squid
TuxCare:CentOS-Stream:8
 before 7:4.15-10.module_el8+2314+6d353102.tuxcare.els3
7:4.15-10.module_el8+2314+6d353102.tuxcare.els3
squid
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els1
4.10-1ubuntu1.13+tuxcare.els1
squid-cgi
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els1
4.10-1ubuntu1.13+tuxcare.els1
squid-common
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els1
4.10-1ubuntu1.13+tuxcare.els1
squid-purge
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els1
4.10-1ubuntu1.13+tuxcare.els1
squidclient
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els1
4.10-1ubuntu1.13+tuxcare.els1
squid
TuxCare:CentOS:8.4
 before 7:4.11-4.module_el8.4.0+2315+e9aef03b.2.tuxcare.els15
7:4.11-4.module_el8.4.0+2315+e9aef03b.2.tuxcare.els15
squid34
TuxCare:OracleLinux:6
 before 7:3.4.14-16.el6.tuxcare.els11
7:3.4.14-16.el6.tuxcare.els11
squid34
TuxCare:CentOS:6
 before 7:3.4.14-16.el6.tuxcare.els11
7:3.4.14-16.el6.tuxcare.els11
squid
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els12
3.5.12-1ubuntu7.17+tuxcare.els12
squid-cgi
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els12
3.5.12-1ubuntu7.17+tuxcare.els12
squid-common
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els12
3.5.12-1ubuntu7.17+tuxcare.els12
squid-purge
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els12
3.5.12-1ubuntu7.17+tuxcare.els12
squid3
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els12
3.5.12-1ubuntu7.17+tuxcare.els12
squidclient
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els12
3.5.12-1ubuntu7.17+tuxcare.els12
squid
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els10
3.5.27-1ubuntu1.14+tuxcare.els10
squid-cgi
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els10
3.5.27-1ubuntu1.14+tuxcare.els10
squid-common
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els10
3.5.27-1ubuntu1.14+tuxcare.els10
squid-purge
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els10
3.5.27-1ubuntu1.14+tuxcare.els10
squid3
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els10
3.5.27-1ubuntu1.14+tuxcare.els10
squidclient
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els10
3.5.27-1ubuntu1.14+tuxcare.els10
squid
TuxCare:OracleLinux:6
 before 7:3.1.23-30.el6.tuxcare.els15
7:3.1.23-30.el6.tuxcare.els15
squid
TuxCare:Debian:10
 before 4.6-1+deb10u10+tuxcare.els3
4.6-1+deb10u10+tuxcare.els3
squid-cgi
TuxCare:Debian:10
 before 4.6-1+deb10u10+tuxcare.els3
4.6-1+deb10u10+tuxcare.els3
squid-common
TuxCare:Debian:10
 before 4.6-1+deb10u10+tuxcare.els3
4.6-1+deb10u10+tuxcare.els3
squid-purge
TuxCare:Debian:10
 before 4.6-1+deb10u10+tuxcare.els3
4.6-1+deb10u10+tuxcare.els3
squid3
TuxCare:Debian:10
 before 4.6-1+deb10u10+tuxcare.els3
4.6-1+deb10u10+tuxcare.els3
squidclient
TuxCare:Debian:10
 before 4.6-1+deb10u10+tuxcare.els3
4.6-1+deb10u10+tuxcare.els3
squid
TuxCare:CentOS:6
 before 7:3.1.23-30.el6.tuxcare.els15
7:3.1.23-30.el6.tuxcare.els15
squid
TuxCare:AlmaLinux:9.2
 before 7:5.5-5.el9_2.1.tuxcare.els10
7:5.5-5.el9_2.1.tuxcare.els10
squid
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid-migration-script
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid-sysvinit
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid
TuxCare:RHEL:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid-migration-script
TuxCare:RHEL:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid-sysvinit
TuxCare:RHEL:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid
TuxCare:CentOS:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid-migration-script
TuxCare:CentOS:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid-sysvinit
TuxCare:CentOS:7
 before 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
7:3.5.20-17.0.5.el7_9.99.tuxcare.els2
squid
TuxCare:AlmaLinux:9.6
 before 7:5.5-19.el9_6.1.tuxcare.els1
7:5.5-19.el9_6.1.tuxcare.els1
squid
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid-migration-script
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid-sysvinit
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid
TuxCare:CentOS:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid-migration-script
TuxCare:CentOS:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid-sysvinit
TuxCare:CentOS:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid
TuxCare:RHEL:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid-migration-script
TuxCare:RHEL:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid-sysvinit
TuxCare:RHEL:7
 before 7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1
squid
Debian:12
 before 5.7-2+deb12u4, plus listed versions
5.7-25.7-2+deb12u15.7-2+deb12u25.7-2+deb12u3
5.7-2+deb12u4
squid
Debian:13
 before 6.13-2+deb13u1, plus listed versions
6.13-2
6.13-2+deb13u1
squid
Debian:14
 before 7.2-1, plus listed versions
6.13-27.1-1
7.2-1
squid
Debian:11
From an advisory covering 2 CVEs
 before 4.13-10+deb11u6, plus listed versions
4.13-104.13-10+deb11u14.13-10+deb11u24.13-10+deb11u34.13-10+deb11u44.13-10+deb11u5
4.13-10+deb11u6
squid
Mageia:9
From an advisory covering 5 CVEs
 before 5.9-1.5.mga9
5.9-1.5.mga9
squid
openEuler:24.03-LTS
 before 6.6-6.oe2403
6.6-6.oe2403
squid
openEuler:24.03-LTS-SP2
 before 6.6-6.oe2403sp2
6.6-6.oe2403sp2
squid
openEuler:24.03-LTS-SP1
 before 6.6-6.oe2403sp1
6.6-6.oe2403sp1
squid
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 4.9-29.oe2203sp4
4.9-29.oe2203sp4
squid
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 4.9-29.oe2203sp3
4.9-29.oe2203sp3
squid
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 4.9-25.oe2003sp4
4.9-25.oe2003sp4
libecap
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-devel
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
squid
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-10.module+el8.10.0+23592+d564ec65.9
7:4.15-10.module+el8.10.0+23592+d564ec65.9
squid-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-10.module+el8.10.0+23592+d564ec65.9
7:4.15-10.module+el8.10.0+23592+d564ec65.9
squid-debugsource
Red Hat:enterprise_linux:8::appstream
 before 7:4.15-10.module+el8.10.0+23592+d564ec65.9
7:4.15-10.module+el8.10.0+23592+d564ec65.9
squid
Red Hat:rhel_e4s:9.2::appstream
 before 7:5.5-5.el9_2.10
7:5.5-5.el9_2.10
squid-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 7:5.5-5.el9_2.10
7:5.5-5.el9_2.10
squid-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 7:5.5-5.el9_2.10
7:5.5-5.el9_2.10
squid
Red Hat:rhel_eus:9.4::appstream
 before 7:5.5-13.el9_4.4
7:5.5-13.el9_4.4
squid-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 7:5.5-13.el9_4.4
7:5.5-13.el9_4.4
squid-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 7:5.5-13.el9_4.4
7:5.5-13.el9_4.4
squid
Red Hat:rhel_e4s:9.0::appstream
 before 7:5.2-1.el9_0.9
7:5.2-1.el9_0.9
squid-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 7:5.2-1.el9_0.9
7:5.2-1.el9_0.9
squid-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 7:5.2-1.el9_0.9
7:5.2-1.el9_0.9
squid
Red Hat:rhel_els:7
 before 7:3.5.20-17.el7_9.15
7:3.5.20-17.el7_9.15
libecap
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
squid-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
squid-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
libecap
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
squid-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
squid-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
libecap
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_tus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
squid-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
squid-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+23600+226c63ed.8
7:4.15-3.module+el8.6.0+23600+226c63ed.8
libecap
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.8::appstream
 before 7:4.15-6.module+el8.8.0+23607+473e38b5.8
7:4.15-6.module+el8.8.0+23607+473e38b5.8
squid-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 7:4.15-6.module+el8.8.0+23607+473e38b5.8
7:4.15-6.module+el8.8.0+23607+473e38b5.8
squid-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 7:4.15-6.module+el8.8.0+23607+473e38b5.8
7:4.15-6.module+el8.8.0+23607+473e38b5.8
libecap
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_tus:8.8::appstream
 before 7:4.15-6.module+el8.8.0+23607+473e38b5.8
7:4.15-6.module+el8.8.0+23607+473e38b5.8
squid-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 7:4.15-6.module+el8.8.0+23607+473e38b5.8
7:4.15-6.module+el8.8.0+23607+473e38b5.8
squid-debugsource
Red Hat:rhel_tus:8.8::appstream
 before 7:4.15-6.module+el8.8.0+23607+473e38b5.8
7:4.15-6.module+el8.8.0+23607+473e38b5.8
libecap
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+23601+6cdb820c.11
7:4.4-8.module+el8.2.0+23601+6cdb820c.11
squid-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+23601+6cdb820c.11
7:4.4-8.module+el8.2.0+23601+6cdb820c.11
squid-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+23601+6cdb820c.11
7:4.4-8.module+el8.2.0+23601+6cdb820c.11
squid
Red Hat:enterprise_linux:9::appstream
 before 7:5.5-22.el9_7.1
7:5.5-22.el9_7.1
squid-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 7:5.5-22.el9_7.1
7:5.5-22.el9_7.1
squid-debugsource
Red Hat:enterprise_linux:9::appstream
 before 7:5.5-22.el9_7.1
7:5.5-22.el9_7.1
squid
Red Hat:enterprise_linux:10.1
 before 7:6.10-6.el10_1.1
7:6.10-6.el10_1.1
squid-debuginfo
Red Hat:enterprise_linux:10.1
 before 7:6.10-6.el10_1.1
7:6.10-6.el10_1.1
squid-debugsource
Red Hat:enterprise_linux:10.1
 before 7:6.10-6.el10_1.1
7:6.10-6.el10_1.1
squid
Red Hat:enterprise_linux_eus:10.0
 before 7:6.10-5.el10_0.1
7:6.10-5.el10_0.1
squid-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 7:6.10-5.el10_0.1
7:6.10-5.el10_0.1
squid-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 7:6.10-5.el10_0.1
7:6.10-5.el10_0.1
squid
Red Hat:rhel_eus:9.6::appstream
 before 7:5.5-19.el9_6.2
7:5.5-19.el9_6.2
squid-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 7:5.5-19.el9_6.2
7:5.5-19.el9_6.2
squid-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 7:5.5-19.el9_6.2
7:5.5-19.el9_6.2
libecap
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
7:4.11-4.module+el8.4.0+23593+1fc48abe.10
squid-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
7:4.11-4.module+el8.4.0+23593+1fc48abe.10
squid-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
7:4.11-4.module+el8.4.0+23593+1fc48abe.10
libecap
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus_long_life:8.4::appstream
 before 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
7:4.11-4.module+el8.4.0+23593+1fc48abe.10
squid-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
7:4.11-4.module+el8.4.0+23593+1fc48abe.10
squid-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
 before 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
7:4.11-4.module+el8.4.0+23593+1fc48abe.10
libecap
Rocky Linux:8
 before 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
squid
Rocky Linux:8
 before 7:4.15-10.module+el8.10.0+2080+49064dbd.9
7:4.15-10.module+el8.10.0+2080+49064dbd.9
squid
Rocky Linux:9
 before 7:5.5-22.el9_7.1
7:5.5-22.el9_7.1
squid
Rocky Linux:10
 before 7:6.10-6.el10_1.1
7:6.10-6.el10_1.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Manager Proxy LTS 4.3
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Manager Server LTS 4.3
 before 5.7-150400.3.38.2
5.7-150400.3.38.2
squid
SUSE:Linux Enterprise Module for Server Applications 15 SP6
 before 6.10-150600.3.14.1
6.10-150600.3.14.1
squid
SUSE:Linux Enterprise Module for Server Applications 15 SP7
 before 6.10-150600.3.14.1
6.10-150600.3.14.1
squid
openSUSE:Leap 15.6
 before 6.10-150600.3.14.1
6.10-150600.3.14.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 4.17-150000.5.58.1
4.17-150000.5.58.1
squid
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 4.17-150000.5.58.1
4.17-150000.5.58.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 4.17-150000.5.58.1
4.17-150000.5.58.1
squid
SUSE:Enterprise Storage 7.1
 before 4.17-150000.5.58.1
4.17-150000.5.58.1
squid
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 4.17-4.59.1
4.17-4.59.1
squid
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 4.17-4.59.1
4.17-4.59.1
squid
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 6.12-160000.3.1
6.12-160000.3.1
squid
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 6.12-160000.3.1
6.12-160000.3.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 8 CVEs
 before 5.7-150400.3.41.1
5.7-150400.3.41.1
squid3
Ubuntu:Pro:16.04:LTS
 before 3.5.12-1ubuntu7.16+esm5, plus listed versions
3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1
Show 19 moreShow less
3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm13.5.12-1ubuntu7.16+esm23.5.12-1ubuntu7.16+esm33.5.12-1ubuntu7.16+esm4
3.5.12-1ubuntu7.16+esm5
squid3
Ubuntu:Pro:18.04:LTS
 before 3.5.27-1ubuntu1.14+esm4, plus listed versions
3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2
Show 15 moreShow less
3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.143.5.27-1ubuntu1.14+esm13.5.27-1ubuntu1.14+esm23.5.27-1ubuntu1.14+esm3
3.5.27-1ubuntu1.14+esm4
squid
Ubuntu:Pro:20.04:LTS
 before 4.10-1ubuntu1.13+esm1, plus listed versions
4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3
Show 15 moreShow less
4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.74.10-1ubuntu1.84.10-1ubuntu1.94.10-1ubuntu1.104.10-1ubuntu1.114.10-1ubuntu1.124.10-1ubuntu1.13
4.10-1ubuntu1.13+esm1
squid
Ubuntu:22.04:LTS
 before 5.9-0ubuntu0.22.04.4, plus listed versions
4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.1
Show 9 moreShow less
5.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.15.7-0ubuntu0.22.04.25.7-0ubuntu0.22.04.35.7-0ubuntu0.22.04.45.9-0ubuntu0.22.04.15.9-0ubuntu0.22.04.25.9-0ubuntu0.22.04.3
5.9-0ubuntu0.22.04.4
squid
Ubuntu:24.04:LTS
 before 6.13-0ubuntu0.24.04.3, plus listed versions
6.1-2ubuntu16.1-2ubuntu26.5-1ubuntu16.5-1ubuntu26.5-1ubuntu3
Show 6 moreShow less
6.6-1ubuntu46.6-1ubuntu56.6-1ubuntu5.16.10-0ubuntu0.24.04.16.13-0ubuntu0.24.04.16.13-0ubuntu0.24.04.2
6.13-0ubuntu0.24.04.3
squid
Ubuntu:25.10
 before 6.13-1ubuntu4.1, plus listed versions
6.13-1ubuntu16.13-1ubuntu26.13-1ubuntu36.13-1ubuntu4
6.13-1ubuntu4.1
squid
openSUSE:Tumbleweed
 before 7.3-1.1
7.3-1.1
squid
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 6.12-160000.3.1
6.12-160000.3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubmonzaviman/CVE-2025-621682025-10-22
PoC in GitHubshahroodcert/CVE-2025-621682025-11-02
PoC in GitHubnehkark/CVE-2025-621682025-11-25
NucleiSquid Proxy - HTTP Authentication Credentials Disclosure

History

History
RecordedChangedSources
affected
exploits, factsOSV
first indexedCVE List, EUVD, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-62168 is a critical vulnerability (CVSS 10.0) in Squid-cache Squid, published October 17, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 64.8%, the 99th percentile. Fixed in squid 7.3-r0.

References

Show 104 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 12 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open