Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-54574

Опубликовано: 01 авг. 2025
Источник: nvd
CVSS3: 9.3
EPSS Низкий

Описание

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

EPSS

Процентиль: 75%
0.00927
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 9.3
ubuntu
5 дней назад

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

CVSS3: 8.9
redhat
5 дней назад

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

CVSS3: 9.3
debian
5 дней назад

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid ...

CVSS3: 9.3
fstec
6 дней назад

Уязвимость прокси-сервера Squid, связанная с переполнением буфера в динамической памяти при обработке URN-заголовков, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 75%
0.00927
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-122