Summary
It was discovered that Squid incorrectly handled certain long SNMP OIDs. A
remote attacker could possibly use this issue to cause Squid to crash,
resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | squid | 5.9-0ubuntu0.22.04.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | squid | 6.13-0ubuntu0.24.04.2 |
Vulnerabilities 1
-
Medium 4.0
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
References
-
report
https://ubuntu.com/security/CVE-2025-59362