Critical Information Disclosure Vulnerability in Squid Proxy Server
Summary
ALSA-2025:21002: Important: squid security update. Affects squid versions < 7:6.10-6.el10_1.1. Fixed in 7:6.10-6.el10_1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a high-performance proxy caching server designed for web clients, which supports various protocols including FTP and HTTP. It is widely used for improving web performance by caching frequently accessed content, thus reducing bandwidth usage and improving response times. However, Squid has been found to have a vulnerability that could lead to the unintended disclosure of sensitive information.
Vulnerability Detail
The vulnerability identified as CVE-2025-62168 allows for information disclosure through authentication credential leakage during error handling processes in Squid. This flaw can potentially expose sensitive user credentials to unauthorized parties, leading to further security breaches. The issue arises from improper handling of authentication errors, which can inadvertently reveal sensitive data in error messages.
How To Fix
Minimum fixed version
7:6.10-6.el10_1.1
This is the first release that contains the fix.
sudo dnf update squidTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the Squid server and implement stricter error handling to prevent sensitive information from being exposed in error messages. Additionally, consider disabling any unnecessary authentication methods until the update is applied.
Conclusion
The Squid proxy server has a critical vulnerability that can lead to information disclosure through improper error handling. It is essential for users to update their installations to the latest patched version to protect against potential security risks. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for squid →
FAQ
CVE-2025-62168 is a security vulnerability in the Squid proxy server that allows for the leakage of authentication credentials during error handling.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The primary risk is the unauthorized disclosure of sensitive user credentials, which could lead to further exploitation and security breaches.
Yes, a patch is available. Users should update to version 7:6.10-6.el10_1.1 or later to fix the vulnerability.
If immediate updates are not possible, implement stricter access controls and error handling to minimize the risk of credential leakage.
Related vulnerabilities
Recent vulnerabilities recorded for squid.
