Every CVE Search/ Get API key

CVE-2025-54574

Squid's URN Handling can lead to Buffer Overflow

9.3 CriticalPublic exploitFix available

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
High

Exploit likelihood

22.1%Up 21.2 points since Aug 2, 2025
90%50%10%1%

What each source reports

CVE List Score used 9.3

Squid's URN Handling can lead to Buffer Overflow

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Record
CVE-2025-54574
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2025-23392 9.3

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Record
EUVD-2025-23392
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
Updated
2026-11-02
NVD 9.3

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Record
CVE-2025-54574
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122, CWE-787
Updated
2026-11-02
OSV 9.3

Squid's URN Handling can lead to Buffer Overflow

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Record
CVE-2025-54574
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-06
OSVDEBIAN-CVE-2025-54574 9.8

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Record
DEBIAN-CVE-2025-54574
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1164 9.8

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2026-1164
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVOESA-2026-1165 9.8

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2026-1165
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1551 9.8

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.(CVE-2025-54574)

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.(CVE-2025-62168)

Record
OESA-2026-1551
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7465 8.9

Red Hat Security Advisory: squid security update

Record
RHSA-2023:7465
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2023:7668 8.9

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2023:7668
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:0072 8.9

Red Hat Security Advisory: squid security update

Record
RHSA-2024:0072
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:0397 8.9

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:0397
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:0771 8.9

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:0771
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:0772 8.9

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:0772
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:0773 8.9

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:0773
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2024:1153 8.9

Red Hat Security Advisory: squid security update

Record
RHSA-2024:1153
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2025:14414 8.9

Red Hat Security Advisory: squid security update

Record
RHSA-2025:14414
CVSS 3.1
8.9 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2025-54574 9.3

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Record
UBUNTU-CVE-2025-54574
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:7668 No score

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: DoS against HTTP and HTTPS (CVE-2023-5824)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:7668
Updated
2026-11-06
OSVAZL-66075 No score

CVE-2025-54574 affecting package squid 5.7-5

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

Record
AZL-66075
Updated
2026-11-02
OSVCLSA-2025-1757010850 No score

squid: Fix of CVE-2025-54574

  • CVE-2025-54574: fix heap buffer overflow in URN parsing
Record
CLSA-2025-1757010850
Updated
2026-11-02
OSVCLSA-2025-1757014622 No score

squid34: Fix of CVE-2025-54574

  • CVE-2025-54574: fix buffer overflow in URN handling
Record
CLSA-2025-1757014622
Updated
2026-11-02
OSVCLSA-2025-1757015024 No score

squid: Fix of CVE-2025-54574

  • CVE-2025-54574: fix heap buffer overflow in URN parsing
Record
CLSA-2025-1757015024
Updated
2026-11-02
OSVCLSA-2025-1757015131 No score

squid: Fix of CVE-2025-54574

  • CVE-2025-54574: fix buffer overflow in URN handling
Record
CLSA-2025-1757015131
Updated
2026-11-02
OSVCLSA-2025-1757016520 No score

squid34: Fix of CVE-2025-54574

  • CVE-2025-54574: fix buffer overflow in URN handling
Record
CLSA-2025-1757016520
Updated
2026-11-02
OSVCLSA-2025-1757076484 No score

squid: Fix of CVE-2025-54574

  • CVE-2025-54574: fix buffer overflow in URN handling
Record
CLSA-2025-1757076484
Updated
2026-11-02
OSVCLSA-2025-1757076677 No score

Fix CVE(s): CVE-2025-54574

  • SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities
    • debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default
    • CVE-2025-54574
Record
CLSA-2025-1757076677
Updated
2026-11-02
OSVCLSA-2025-1757076749 No score

Fix CVE(s): CVE-2025-54574

  • SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities
    • debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default
    • CVE-2025-54574
Record
CLSA-2025-1757076749
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libecap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
libecap-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
squid
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7:4.15-7.module_el8.9.0+3696+b881db49.3
7:4.15-7.module_el8.9.0+3696+b881db49.3
squid
Azure Linux:2
 through 5.7-5 None known
squid
TuxCare:RHEL:7
 before 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
squid-migration-script
TuxCare:RHEL:7
 before 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
squid-sysvinit
TuxCare:RHEL:7
 before 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
squid34
TuxCare:OracleLinux:6
 before 7:3.4.14-16.el6.tuxcare.els10
7:3.4.14-16.el6.tuxcare.els10
Show 106 moreShow less
Affected packages
PackageAffectedFixed
squid
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
squid-migration-script
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
squid-sysvinit
TuxCare:OracleLinux:7
 before 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
7:3.5.20-17.0.5.el7_9.13.tuxcare.els2
squid
TuxCare:OracleLinux:6
 before 7:3.1.23-30.el6.tuxcare.els14
7:3.1.23-30.el6.tuxcare.els14
squid34
TuxCare:CentOS:6
 before 7:3.4.14-16.el6.tuxcare.els10
7:3.4.14-16.el6.tuxcare.els10
squid
TuxCare:CentOS:6
 before 7:3.1.23-30.el6.tuxcare.els14
7:3.1.23-30.el6.tuxcare.els14
squid
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els11
3.5.12-1ubuntu7.17+tuxcare.els11
squid-cgi
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els11
3.5.12-1ubuntu7.17+tuxcare.els11
squid-common
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els11
3.5.12-1ubuntu7.17+tuxcare.els11
squid-purge
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els11
3.5.12-1ubuntu7.17+tuxcare.els11
squid3
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els11
3.5.12-1ubuntu7.17+tuxcare.els11
squidclient
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els11
3.5.12-1ubuntu7.17+tuxcare.els11
squid
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els9
3.5.27-1ubuntu1.14+tuxcare.els9
squid-cgi
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els9
3.5.27-1ubuntu1.14+tuxcare.els9
squid-common
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els9
3.5.27-1ubuntu1.14+tuxcare.els9
squid-purge
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els9
3.5.27-1ubuntu1.14+tuxcare.els9
squid3
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els9
3.5.27-1ubuntu1.14+tuxcare.els9
squidclient
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els9
3.5.27-1ubuntu1.14+tuxcare.els9
squid
Debian:12
 before 5.7-2+deb12u3, plus listed versions
5.7-25.7-2+deb12u15.7-2+deb12u2
5.7-2+deb12u3
squid
Debian:13
 before 6.5-1
6.5-1
squid
Debian:14
 before 6.5-1
6.5-1
squid
Debian:11
From an advisory covering 3 CVEs
 before 4.13-10+deb11u5, plus listed versions
4.13-104.13-10+deb11u14.13-10+deb11u24.13-10+deb11u34.13-10+deb11u4
4.13-10+deb11u5
squid
Debian:12
From an advisory covering 2 CVEs
 before 5.7-2+deb12u3, plus listed versions
5.7-25.7-2+deb12u15.7-2+deb12u2
5.7-2+deb12u3
squid
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 4.9-29.oe2203sp4
4.9-29.oe2203sp4
squid
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 4.9-29.oe2203sp3
4.9-29.oe2203sp3
squid
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 4.9-25.oe2003sp4
4.9-25.oe2003sp4
squid
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 7:5.5-6.el9_3.2
7:5.5-6.el9_3.2
squid-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 7:5.5-6.el9_3.2
7:5.5-6.el9_3.2
squid-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 7:5.5-6.el9_3.2
7:5.5-6.el9_3.2
libecap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
squid
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 7:4.15-7.module+el8.9.0+20806+014d88aa.3
7:4.15-7.module+el8.9.0+20806+014d88aa.3
squid-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 7:4.15-7.module+el8.9.0+20806+014d88aa.3
7:4.15-7.module+el8.9.0+20806+014d88aa.3
squid-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 7:4.15-7.module+el8.9.0+20806+014d88aa.3
7:4.15-7.module+el8.9.0+20806+014d88aa.3
squid
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 6 CVEs
 before 7:5.5-5.el9_2.3
7:5.5-5.el9_2.3
squid-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 6 CVEs
 before 7:5.5-5.el9_2.3
7:5.5-5.el9_2.3
squid-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 6 CVEs
 before 7:5.5-5.el9_2.3
7:5.5-5.el9_2.3
libecap
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 7 CVEs
 before 7:4.15-6.module+el8.8.0+21068+0ecbc070.3
7:4.15-6.module+el8.8.0+21068+0ecbc070.3
squid-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 7 CVEs
 before 7:4.15-6.module+el8.8.0+21068+0ecbc070.3
7:4.15-6.module+el8.8.0+21068+0ecbc070.3
squid-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 7 CVEs
 before 7:4.15-6.module+el8.8.0+21068+0ecbc070.3
7:4.15-6.module+el8.8.0+21068+0ecbc070.3
libecap
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 7 CVEs
 before 7:4.15-3.module+el8.6.0+21069+a1561e3d.4
7:4.15-3.module+el8.6.0+21069+a1561e3d.4
squid-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 7 CVEs
 before 7:4.15-3.module+el8.6.0+21069+a1561e3d.4
7:4.15-3.module+el8.6.0+21069+a1561e3d.4
squid-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 7 CVEs
 before 7:4.15-3.module+el8.6.0+21069+a1561e3d.4
7:4.15-3.module+el8.6.0+21069+a1561e3d.4
libecap
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
squid-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
squid-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
libecap
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
squid-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
squid-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
libecap
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
squid-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
squid-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 7 CVEs
 before 7:4.4-8.module+el8.2.0+21173+22259b09.7
7:4.4-8.module+el8.2.0+21173+22259b09.7
libecap
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
squid-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
squid-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
libecap
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
squid-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
squid-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
libecap
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 7 CVEs
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
squid-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
squid-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 7 CVEs
 before 7:4.11-4.module+el8.4.0+21174+3894a031.6
7:4.11-4.module+el8.4.0+21174+3894a031.6
squid
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 7 CVEs
 before 7:5.2-1.el9_0.4
7:5.2-1.el9_0.4
squid-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 7 CVEs
 before 7:5.2-1.el9_0.4
7:5.2-1.el9_0.4
squid-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 7 CVEs
 before 7:5.2-1.el9_0.4
7:5.2-1.el9_0.4
squid
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 7:3.5.20-17.el7_9.14
7:3.5.20-17.el7_9.14
squid-debuginfo
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 7:3.5.20-17.el7_9.14
7:3.5.20-17.el7_9.14
squid-migration-script
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 7:3.5.20-17.el7_9.14
7:3.5.20-17.el7_9.14
squid-sysvinit
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 7:3.5.20-17.el7_9.14
7:3.5.20-17.el7_9.14
squid3
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1
Show 22 moreShow less
3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm13.5.12-1ubuntu7.16+esm23.5.12-1ubuntu7.16+esm33.5.12-1ubuntu7.16+esm43.5.12-1ubuntu7.16+esm53.5.12-1ubuntu7.16+esm63.5.12-1ubuntu7.16+esm7
 None known
squid3
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2
Show 18 moreShow less
3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.143.5.27-1ubuntu1.14+esm13.5.27-1ubuntu1.14+esm23.5.27-1ubuntu1.14+esm33.5.27-1ubuntu1.14+esm43.5.27-1ubuntu1.14+esm53.5.27-1ubuntu1.14+esm6
 None known
squid
Ubuntu:20.04:LTS
 before 4.10-1ubuntu1.12, plus listed versions
4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3
Show 13 moreShow less
4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.74.10-1ubuntu1.84.10-1ubuntu1.94.10-1ubuntu1.104.10-1ubuntu1.11
4.10-1ubuntu1.12
squid
Ubuntu:22.04:LTS
 before 5.7-0ubuntu0.22.04.4, plus listed versions
4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.1
Show 5 moreShow less
5.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.15.7-0ubuntu0.22.04.25.7-0ubuntu0.22.04.3
5.7-0ubuntu0.22.04.4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubgmh5225/Blackash-CVE-2025-545742025-08-05
PoC in GitHubstarrynightsecurity/CVE-2025-54574-Squid-Heap-Buffer-Overflow2025-11-17

History

History
RecordedChangedSources
affected, aliases, published, referencesOSV
affected
facts
first indexedCVE List, EUVD, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-54574 is a critical vulnerability (CVSS 9.3) in Squid-cache Squid, published December 6, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.1%, the 97th percentile. Fixed in squid 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2.

References

Show 84 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open