REDHAT-BUG-2386026: Buffer Overflow
Published Aug 1, 2025
·Updated
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
Affected Software
1 affected component
Squid Squid<6.4
Event History
Aug 1, 2025
Data Sourced
via Red Hat·07:01 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2386026?
REDHAT-BUG-2386026 is considered a critical vulnerability due to the potential for remote code execution.
2
How do I fix REDHAT-BUG-2386026?
To fix REDHAT-BUG-2386026, upgrade Squid to version 6.4 or later.
3
What versions of Squid are affected by REDHAT-BUG-2386026?
Squid versions 6.3 and below are affected by REDHAT-BUG-2386026.
4
What type of vulnerability is REDHAT-BUG-2386026?
REDHAT-BUG-2386026 is a heap buffer overflow vulnerability.
5
Can I mitigate REDHAT-BUG-2386026 without upgrading my software?
Yes, you can mitigate REDHAT-BUG-2386026 by disabling URN access permissions.