CVE-2025-54574

Squid's URN Handling can lead to Buffer Overflow

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.

We have discovered 7,353 live websites that are affected by CVE-2025-54574.

Run a Free Instant Scan



Affected Software

Product  Squid
Category Cache Tools
Vulnerable Domains7,353 live websites (91% of Squid install base)
Vulnerable Versions
  • from 0 through 6.4
Vulnerable Versions Count45 versions ( 78% of all versions)


Common Weakness Enumeration

CWE-122 Heap-based Buffer Overflow



Details

  • Published - Aug 1, 2025
  • Updated - Nov 5, 2025

Website Distribution by Country

Number of websites using CVE-2025-54574
United States583 websites


Germany3,634 websites
Japan888 websites
GB370 websites
France231 websites
Spain176 websites
Russia161 websites
Romania157 websites
China151 websites
Hong Kong144 websites

Website Distribution by TLD

Number of websites using CVE-2025-54574
.de2,288 websites
.com2,040 websites
.net316 websites
.co.uk296 websites
.fr223 websites
.org204 websites
.jp164 websites
.es151 websites
.ru148 websites
.at127 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-54574

Top websites that are affected by CVE-2025-54574. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.*********.net GB*,***
***.org United States*,***
*********.net GB*,***
*********.**.uk GB**,***
*****.org France**,***
****.*********.net GB**,***
*******.**.jp United States**,***
*********.**.gov United States**,***
*******.*************.com United States**,***
**.*****.is Iceland**,***
See full domain list

FAQ

CVE-2025-54574 is Heap-based Buffer Overflow in Squid
A total of 7,353 websites have been identified as vulnerable to CVE-2025-54574, based on global website indexing conducted by WebTechSurvey.
The Squid is affected by the CVE-2025-54574 vulnerability.
Squid versions up to 6.4 are vulnerable to CVE-2025-54574.
CVE-2025-54574 is resolved in version 6.4 of Squid.