Published: 03/11/2023 Updated: 16/02/2024

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Vulnerable Product	Search on Vulmon	Subscribe to Product
squid-cache squid
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux 8.0
redhat enterprise linux server tus 8.2
redhat enterprise linux server aus 8.2
redhat enterprise linux server tus 8.4
redhat enterprise linux server aus 8.4
redhat enterprise linux server aus 8.6
redhat enterprise linux server tus 8.6
redhat enterprise linux eus 8.6
redhat enterprise linux 9.0
redhat enterprise linux eus 9.0
redhat enterprise linux server tus 8.8
redhat enterprise linux eus 8.8
redhat enterprise linux server aus 9.2
redhat enterprise linux eus 9.2
redhat enterprise linux for power little endian 8.0_ppc64le
redhat enterprise linux for ibm z systems 8.0_s390x
redhat enterprise linux for arm 64 8.0_aarch64
redhat enterprise linux server tus 9.2

Debian Bug report logs - #1055250 squid: CVE-2023-46847: SQUID-2023:3 Denial of Service in HTTP Digest Authentication Package: squid; Maintainer for squid is Luigi Gangitano <luigi@debianorg>; Source for squid is src:squid (PTS, buildd, popcon) Reported by: Andras Korn <korn-debbugs@elanrulezorg> Date: Wed, 25 Oct ...

Synopsis Critical: squid:4 security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the squid:4 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as ...

Synopsis Critical: squid security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for squid is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Security has rated this ...

Synopsis Critical: squid security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for squid is now available for Red Hat Enterprise Linux 76 Advanced Update SupportRed Hat Product Security has rated this ...

概述 Critical: squid security update 类型/严重性 Security Advisory: Critical Red Hat Insights 补丁分析识别并修复受此公告影响的系统。查看受影响的系统标题 An update for squid is now available for Red Hat Enterprise Linux 77 Advanced Update SupportRed Hat Product Security has rated this update a ...

Synopsis Critical: squid security update Type / Sévérité Security Advisory: Critical Analyse des correctifs dans Red Hat Insights Identifiez et remédiez aux systèmes concernés par cette alerte Voir les systèmes concernés Sujet An update for squid is now available for Red Hat Enterprise Linux 9Red Hat Product Security has r ...

Synopsis Critical: squid security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for squid is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a securi ...

Check Point Reference: CPAI-2023-1531 Date Published: 18 Feb 2024 Severity: High ...

Get Started

CVE-2023-46847

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect