7.5
CVSSv3

CVE-2023-46848

Published: 03/11/2023 Updated: 14/12/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

Vulnerable Product Search on Vulmon Subscribe to Product

squid-cache squid

redhat enterprise linux 9.0

redhat enterprise linux server aus 9.2

redhat enterprise linux eus 9.2

redhat enterprise linux server tus 9.2

Vendor Advisories

Debian Bug report logs - #1055251 squid: CVE-2023-46848: SQUID-2023:5 Denial of Service in FTP Package: squid; Maintainer for squid is Luigi Gangitano <luigi@debianorg>; Source for squid is src:squid (PTS, buildd, popcon) Reported by: Andras Korn <korn-debbugs@elanrulezorg> Date: Wed, 25 Oct 2023 10:39:02 UTC Sev ...
Synopsis Critical: squid security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for squid is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Security has rated this ...
Synopsis Critical: squid security update Type / Sévérité Security Advisory: Critical Analyse des correctifs dans Red Hat Insights Identifiez et remédiez aux systèmes concernés par cette alerte Voir les systèmes concernés Sujet An update for squid is now available for Red Hat Enterprise Linux 9Red Hat Product Security has r ...
Synopsis Critical: squid security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for squid is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a securi ...