CVEvulnerability
CVE-2023-46847
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-03
- Last modified
- 2026-08-07
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-120
Description
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Affected configurations
• squid-cache squid (>= 3.2.0.1 < 6.4)
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• redhat enterprise linux eus 8.6
• redhat enterprise linux eus 8.8
• redhat enterprise linux eus 9.0
• redhat enterprise linux eus 9.2
• redhat enterprise linux for arm 64 8.0 aarch64
• redhat enterprise linux for ibm z systems 8.0 s390x
• redhat enterprise linux for power little endian 8.0 ppc64le
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 8.2
• redhat enterprise linux server aus 8.4
• redhat enterprise linux server aus 8.6
• redhat enterprise linux server aus 9.2
• redhat enterprise linux server tus 8.2
• redhat enterprise linux server tus 8.4
• redhat enterprise linux server tus 8.6
• redhat enterprise linux server tus 8.8
• redhat enterprise linux server tus 9.2
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://access.redhat.com/errata/RHSA-2023:6266 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6267 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6268 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6748 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6801 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6803 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6804 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6805 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6810 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6882 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6884 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7213 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7576 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7578 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-46847 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245916 Issue Tracking, Third Party Advisory
- https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:6266 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6267 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6268 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6748 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6801 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6803 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6804 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6805 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6810 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6882 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6884 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7213 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7576 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7578 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-46847 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245916 Issue Tracking, Third Party Advisory
- https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html lists.debian.org
- https://security.netapp.com/advisory/ntap-20231130-0002/ security.netapp.com