CVE-2025-54574
CRITICALSquid < 6.4 - Out-of-Bounds Write
Title source: ruleDescription
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
Exploits (2)
nomisec
WRITEUP
by starrynightsecurity · poc
https://github.com/starrynightsecurity/CVE-2025-54574-Squid-Heap-Buffer-Overflow
References (5)
Scores
CVSS v3
9.3
EPSS
0.0390
EPSS Percentile
88.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
Details
CWE
CWE-122
CWE-787
Status
published
Products (1)
squid-cache/squid
< 6.4
Published
Aug 01, 2025
Tracked Since
Feb 18, 2026