Critical severity9.3NVD Advisory· Published Aug 1, 2025· Updated Jun 17, 2026
CVE-2025-54574
CVE-2025-54574
Description
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*range: <6.4
- (no CPE)range: <=6.3
- (no CPE)range: < 6.4
Patches
Vulnerability mechanics
References
5- github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988nvdPatch
- github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3nvdMitigationPatchVendor Advisory
- github.com/squid-cache/squid/releases/tag/SQUID_6_4nvdRelease Notes
- www.openwall.com/lists/oss-security/2025/11/05/5nvd
- lists.debian.org/debian-lts-announce/2025/09/msg00027.htmlnvd
News mentions
0No linked articles in our index yet.