Buffer Over-read in Squid - CVE-2025-54574

Vulnerability identifier: #VU113574

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-54574

CWE-ID: CWE-126

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to a boundary error when processing URN Trivial-HTTP responses. A remote user can send a specially crafted HTTP response from the web server to the affected proxy, trigger memory corruption and force the proxy to deliver up to 4KB of Squid allocated heap memory to the client.

Squid
Debian Linux
openEuler
Fedora
squid (Red Hat package)
squid
squid-debuginfo
squid-debugsource
squid (Debian package)

Install updates from vendor's website.

Squid - update to 6.4
squid (Red Hat package) - update to 3.5.20-17.el7_9.14
squid - addressed in versions 4.9-25, 4.9-29
squid-debuginfo - addressed in versions 4.9-25, 4.9-29
squid-debugsource - addressed in versions 4.9-25, 4.9-29
squid (Debian package) - update to 5.7-2+deb12u3
squid - addressed in versions 6.14-1.fc41, 6.14-1.fc42

• https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3

• Multiple vulnerabilities in Squid
• Debian update for squid
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for squid
• Fedora 42 update for squid
• Fedora 41 update for squid
• openEuler 22.03 LTS SP3 update for squid
• openEuler 22.03 LTS SP4 update for squid
• openEuler 20.03 LTS SP4 update for squid