Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-32748

Fixed in a distro release EPSS 9%CVSS 8.7

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5.

Published 2026-03-26 · CVE record · OSV

Products: squid-cache squid, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 10squid7:6.10-6.el10_1.3
AlmaLinux 8libecap1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux 8libecap1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux 8libecap-devel1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux 8libecap-devel1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux 8squid7:4.15-10.module_el8.10.0+4163+e77fcdac.11
AlmaLinux 9squid7:5.5-22.el9_7.4
Debian 12squidno fix
Debian 13squid6.13-2+deb13u3
Debian 14squid7.5-1
Red Hat Enterprise Linux 10.1squid7:6.10-6.el10_1.3
Red Hat Enterprise Linux 10.1squid-debuginfo7:6.10-6.el10_1.3
Red Hat Enterprise Linux 10.1squid-debugsource7:6.10-6.el10_1.3
Red Hat Enterprise Linux 8libecap0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-debuginfo0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-debugsource0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-devel0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8squid7:4.15-10.module+el8.10.0+24189+04a20c8a.11
Red Hat Enterprise Linux 8squid-debuginfo7:4.15-10.module+el8.10.0+24189+04a20c8a.11
Red Hat Enterprise Linux 8squid-debugsource7:4.15-10.module+el8.10.0+24189+04a20c8a.11
Red Hat Enterprise Linux 9squid7:5.5-22.el9_7.4
Red Hat Enterprise Linux 9squid-debuginfo7:5.5-22.el9_7.4
Red Hat Enterprise Linux 9squid-debugsource7:5.5-22.el9_7.4
Red Hat Enterprise Linux eus 10.0squid7:6.10-5.el10_0.2
Red Hat Enterprise Linux eus 10.0squid-debuginfo7:6.10-5.el10_0.2
Red Hat Enterprise Linux eus 10.0squid-debugsource7:6.10-5.el10_0.2
Red Hat rhel aus 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4squid7:4.11-4.module+el8.4.0+24287+ae9ea41b.11
Red Hat rhel aus 8.4squid-debuginfo7:4.11-4.module+el8.4.0+24287+ae9ea41b.11
Red Hat rhel aus 8.4squid-debugsource7:4.11-4.module+el8.4.0+24287+ae9ea41b.11
Red Hat rhel aus 8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.6squid7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel aus 8.6squid-debuginfo7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel aus 8.6squid-debugsource7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel e4s 8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.6squid7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel e4s 8.6squid-debuginfo7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel e4s 8.6squid-debugsource7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel e4s 8.8libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.8libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.8libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.8libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.8squid7:4.15-6.module+el8.8.0+24284+6402ee68.10
Red Hat rhel e4s 8.8squid-debuginfo7:4.15-6.module+el8.8.0+24284+6402ee68.10
Red Hat rhel e4s 8.8squid-debugsource7:4.15-6.module+el8.8.0+24284+6402ee68.10
Red Hat rhel e4s 9.0squid7:5.2-1.el9_0.10
Red Hat rhel e4s 9.0squid-debuginfo7:5.2-1.el9_0.10
Red Hat rhel e4s 9.0squid-debugsource7:5.2-1.el9_0.10
Red Hat rhel e4s 9.2squid7:5.5-5.el9_2.11
Red Hat rhel e4s 9.2squid-debuginfo7:5.5-5.el9_2.11
Red Hat rhel e4s 9.2squid-debugsource7:5.5-5.el9_2.11
Red Hat rhel els 7squid7:3.5.20-17.el7_9.16
Red Hat rhel eus 9.4squid7:5.5-13.el9_4.5
Red Hat rhel eus 9.4squid-debuginfo7:5.5-13.el9_4.5
Red Hat rhel eus 9.4squid-debugsource7:5.5-13.el9_4.5
Red Hat rhel eus 9.6squid7:5.5-19.el9_6.3
Red Hat rhel eus 9.6squid-debuginfo7:5.5-19.el9_6.3
Red Hat rhel eus 9.6squid-debugsource7:5.5-19.el9_6.3
Red Hat rhel eus long life 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus long life 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus long life 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus long life 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus long life 8.4squid7:4.11-4.module+el8.4.0+24287+ae9ea41b.11
Red Hat rhel eus long life 8.4squid-debuginfo7:4.11-4.module+el8.4.0+24287+ae9ea41b.11
Red Hat rhel eus long life 8.4squid-debugsource7:4.11-4.module+el8.4.0+24287+ae9ea41b.11
Red Hat rhel tus 8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.6squid7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel tus 8.6squid-debuginfo7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel tus 8.6squid-debugsource7:4.15-3.module+el8.6.0+24307+cba8e5bb.9
Red Hat rhel tus 8.8libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.8libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.8libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.8libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.8squid7:4.15-6.module+el8.8.0+24284+6402ee68.10
Red Hat rhel tus 8.8squid-debuginfo7:4.15-6.module+el8.8.0+24284+6402ee68.10
Red Hat rhel tus 8.8squid-debugsource7:4.15-6.module+el8.8.0+24284+6402ee68.10
Rocky Linux 10squid7:6.10-6.el10_1.3
Rocky Linux 8libecap0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
Rocky Linux 8squid7:4.15-10.module+el8.10.0+1985+eaf982f0.6
Rocky Linux 8squid7:4.15-10.module+el8.10.0+1928+e8441768.5
Rocky Linux 8squid7:4.15-10.module+el8.10.0+1885+e30b7122.3
Rocky Linux 8squid7:4.15-10.module+el8.10.0+2080+49064dbd.9
Rocky Linux 8squid7:4.15-10.module+el8.10.0+1758+80ba9f4b
Rocky Linux 8squid7:4.15-10.module+el8.10.0+1881+7e31fb44.1
Rocky Linux 9squid7:5.5-22.el9_7.4
SUSE Linux Enterprise Module for Server Applications 15 SP7squid6.14-150600.3.20.1
SUSE Linux Enterprise Server 15 SP6-LTSSsquid6.14-150600.3.20.1
SUSE Linux Enterprise Server 16.0squid6.14-160000.1.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6squid6.14-150600.3.20.1
SUSE Linux Enterprise Server for SAP applications 16.0squid6.14-160000.1.1
Ubuntu 22.04 LTSsquid5.9-0ubuntu0.22.04.5
Ubuntu 22.04 LTSsquid5.9-0ubuntu0.22.04.8
Ubuntu 24.04 LTSsquid6.14-0ubuntu0.24.04.2
Ubuntu 24.04 LTSsquid6.14-0ubuntu0.24.04.5
Ubuntu 25.10squid6.14-0ubuntu0.25.10.2
Ubuntu Pro 16.04 LTSsquid33.5.12-1ubuntu7.16+esm7
Ubuntu Pro 18.04 LTSsquid33.5.27-1ubuntu1.14+esm6
Ubuntu Pro 20.04 LTSsquid4.10-1ubuntu1.13+esm3
openSUSE Leap 16.0squid6.14-160000.1.1