Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade squid | Dec 5, 2025 | Sep 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade squidUpgrade squid-debuginfoUpgrade squid-migration-scriptUpgrade squid-sysvinit | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade squid-debuginfoUpgrade squid-debugsourceUpgrade squid | Oct 16, 2025 | Sep 26, 2025 |
| Debian | — | Upgrade squid | Nov 13, 2025 | Nov 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 26, 2025 |
| Suse | — | Upgrade squid | Dec 5, 2025 | Oct 10, 2025 |
| Ubuntu | — | Upgrade squid (Ubuntu Pro)Upgrade squid3 (Ubuntu Pro)Upgrade squid | Oct 7, 2025 | Sep 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Sep 26, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub