Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade squid | Dec 5, 2025 | Sep 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade squid-migration-scriptUpgrade squid-sysvinitUpgrade squid-debuginfoUpgrade squid | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade squidUpgrade squid-debugsourceUpgrade squid-debuginfo | Oct 16, 2025 | Sep 26, 2025 |
| Debian | — | Upgrade squid | Nov 13, 2025 | Nov 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 26, 2025 |
| Suse | — | Upgrade squid | Dec 5, 2025 | Oct 10, 2025 |
| Ubuntu | — | Upgrade squidUpgrade squid3 (Ubuntu Pro)Upgrade squid (Ubuntu Pro) | Oct 7, 2025 | Sep 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Sep 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub