CVE-2025-59362 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 29.54%

Affected Products (NVD)

Vendor	Product	Version
squid-cache	squid	𝑥 ≤ 7.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

squid

bookworm	5.7-2+deb12u5 fixed
bookworm (security)	5.7-2+deb12u6 fixed
bullseye	vulnerable
bullseye (security)	4.13-10+deb11u7 fixed
forky	7.6-2 fixed
sid	7.6-2 fixed
trixie	6.13-2+deb13u2 fixed
trixie (security)	6.13-2+deb13u2 fixed

Ubuntu Releases

Ubuntu Product

Codename

squid

focal	Fixed 4.10-1ubuntu1.13+esm2 released
jammy	Fixed 5.9-0ubuntu0.22.04.3 released
noble	Fixed 6.13-0ubuntu0.24.04.2 released
plucky	Fixed 6.13-1ubuntu1.1 released
questing	Fixed 6.13-1ubuntu4 released

squid3

bionic	Fixed 3.5.27-1ubuntu1.14+esm5 released
jammy	dne
noble	dne
plucky	dne
questing	dne
xenial	Fixed 3.5.12-1ubuntu7.16+esm6 released

Amazon Linux Releases

Amazon Package

Release

squid

Amazon Linux 2	7:3.5.20-17.amzn2.7.24 fixed
Amazon Linux 2023	7:6.13-1.amzn2023.0.2 fixed

squid-debuginfo

Amazon Linux 2	7:3.5.20-17.amzn2.7.24 fixed
Amazon Linux 2023	7:6.13-1.amzn2023.0.2 fixed

squid-debugsource

Amazon Linux 2023

7:6.13-1.amzn2023.0.2

fixed

squid-migration-script

Amazon Linux 2

7:3.5.20-17.amzn2.7.24

fixed

squid-sysvinit

Amazon Linux 2

7:3.5.20-17.amzn2.7.24

fixed

Azure Linux Releases

Azure Package

Release

squid

Azure Linux 3.0

0:6.13-2.azl3

fixed

Known Exploits!

https://github.com/Microsvuln/advisories/blob/main/CVE-2025-59362/CVE-2025-59362.md

Common Weakness Enumeration

CWE-121 - Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References

https://github.com/Microsvuln/advisories/blob/main/CVE-2025-59362/CVE-2025-59362.md

https://github.com/squid-cache/squid/pull/2149