Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Squid-cache
  • Squid

No data.

No data.

References
Link Providers
https://github.com/Microsvuln/advisories/blob/main/CVE-2025-59362/CVE-2025-59362.md cve-icon cve-icon cve-icon
https://github.com/squid-cache/squid/commit/0d89165ee6da10e6fa50c44998b3cd16d59400e9 cve-icon
https://github.com/squid-cache/squid/pull/2149 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-59362 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-59362 cve-icon
History

Mon, 29 Sep 2025 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-172

Mon, 29 Sep 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N'}

 cvssV3_1

{'score': 4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Mon, 29 Sep 2025 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Squid-cache
Squid-cache squid
Vendors & Products Squid-cache
Squid-cache squid

Sat, 27 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
Title squid-cache: Squid cache buffer overflow
Weaknesses CWE-121
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 26 Sep 2025 21:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-172
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 26 Sep 2025 16:00:00 +0000

Type Values Removed Values Added
Description Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-09-29T15:30:05.725Z

Reserved: 2025-09-14T00:00:00.000Z

Link: CVE-2025-59362

cve-icon Vulnrichment

Updated: 2025-09-26T20:31:44.217Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-26T16:15:48.667

Modified: 2025-09-29T19:34:10.030

Link: CVE-2025-59362

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-26T00:00:00Z

Links: CVE-2025-59362 - Bugzilla