Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
CVE-2025-59362
CVSS base score
4.0 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-121
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
squid-cache squid
References
- github.com Exploit
- github.com Issue Tracking, Patch