Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2023:7213
HistoryNov 14, 2023 - 12:00 a.m.

Critical: squid:4 security update

2023-11-1400:00:00
errata.almalinux.org
18
squid proxy server
security update
http digest authentication
request/response smuggling
cvss score
unix

9.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

7.3 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.0%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
  • squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8aarch64squid< 4.15-7.module_el8.9.0+3680+f9142978.1.alma.1squid-4.15-7.module_el8.9.0+3680+f9142978.1.alma.1.aarch64.rpm
almalinux8aarch64libecap-devel< 1.0.1-2.module_el8.6.0+2741+01592ae8libecap-devel-1.0.1-2.module_el8.6.0+2741+01592ae8.aarch64.rpm
almalinux8aarch64libecap< 1.0.1-2.module_el8.6.0+2741+01592ae8libecap-1.0.1-2.module_el8.6.0+2741+01592ae8.aarch64.rpm
almalinux8x86_64libecap< 1.0.1-2.module_el8.6.0+2741+01592ae8libecap-1.0.1-2.module_el8.6.0+2741+01592ae8.x86_64.rpm
almalinux8x86_64squid< 4.15-7.module_el8.9.0+3680+f9142978.1.alma.1squid-4.15-7.module_el8.9.0+3680+f9142978.1.alma.1.x86_64.rpm
almalinux8x86_64libecap-devel< 1.0.1-2.module_el8.6.0+2741+01592ae8libecap-devel-1.0.1-2.module_el8.6.0+2741+01592ae8.x86_64.rpm
almalinux8ppc64lesquid< 4.15-7.module_el8.9.0+3680+f9142978.1.alma.1squid-4.15-7.module_el8.9.0+3680+f9142978.1.alma.1.ppc64le.rpm
almalinux8ppc64lelibecap< 1.0.1-2.module_el8.6.0+2741+01592ae8libecap-1.0.1-2.module_el8.6.0+2741+01592ae8.ppc64le.rpm
almalinux8ppc64lelibecap-devel< 1.0.1-2.module_el8.6.0+2741+01592ae8libecap-devel-1.0.1-2.module_el8.6.0+2741+01592ae8.ppc64le.rpm
almalinux8s390xsquid< 4.15-7.module_el8.9.0+3680+f9142978.1.alma.1squid-4.15-7.module_el8.9.0+3680+f9142978.1.alma.1.s390x.rpm
Rows per page:
1-10 of 121

Related

oraclelinux 7
rocky 3
redhat 14
nessus 39
osv 13
almalinux 3
f5 1
mageia 1
openvas 11
redos 2
ubuntu 2
redhatcve 2
debian 3
ubuntucve 2
prion 2
cvelist 2
veracode 3
amazon 4
debiancve 2
centos 1
alpinelinux 2
cloudlinux 2
cve 2
nvd 2
photon 5
oraclelinux
oraclelinux
squid:4 security update
2023-11-22 00:00:00
squid:4 security update
2023-11-07 00:00:00
squid security update
2023-11-03 00:00:00
rocky
rocky
squid:4 security update
2023-11-28 22:43:02
squid:4 security update
2023-11-11 22:59:08
squid security update
2023-11-11 23:00:06
redhat
redhat
(RHSA-2023:6804) Critical: squid:4 security update
2023-11-08 10:09:19
(RHSA-2023:6267) Critical: squid:4 security update
2023-11-02 09:32:58
(RHSA-2023:6810) Critical: squid:4 security update
2023-11-08 10:44:35
nessus
nessus
Rocky Linux 8 : squid:4 (RLSA-2023:6267)
2023-11-11 00:00:00
RHEL 8 : squid:4 (RHSA-2023:7213)
2023-11-14 00:00:00
AlmaLinux 8 : squid:4 (ALSA-2023:6267)
2023-11-06 00:00:00
osv
osv
Critical: squid:4 security update
2023-11-14 00:00:00
Critical: squid:4 security update
2023-11-28 22:43:02
Critical: squid:4 security update
2023-11-11 22:59:08
almalinux
almalinux
Critical: squid:4 security update
2023-11-02 00:00:00
Critical: squid security update
2023-11-07 00:00:00
Critical: squid security update
2023-11-02 00:00:00
f5
f5
K000137864 : Squid vulnerabilities CVE-2023-46846, CVE-2023-46847, CVE-2023-46848
2023-12-11 00:00:00
mageia
mageia
Updated squid packages fix security vulnerabilities
2023-11-10 02:37:11
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0315)
2023-11-10 00:00:00
openSUSE: Security Advisory for squid (SUSE-SU-2023:4380-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4384-1)
2023-11-09 00:00:00
redos
redos
ROS-20231115-01
2023-11-15 00:00:00
ROS-20240521-02
2024-05-21 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2023-11-21 00:00:00
Squid vulnerabilities
2023-12-11 00:00:00
redhatcve
redhatcve
CVE-2023-46846
2023-10-27 08:57:59
CVE-2023-46847
2023-10-27 08:57:59
debian
debian
[SECURITY] [DLA 3709-2] squid regression update
2024-01-22 18:56:25
[SECURITY] [DLA 3709-1] squid security update
2024-01-09 00:08:19
[SECURITY] [DSA 5637-1] squid security update
2024-03-08 14:36:16
ubuntucve
ubuntucve
CVE-2023-46846
2023-11-03 00:00:00
CVE-2023-46847
2023-11-03 00:00:00
prion
prion
Design/Logic Flaw
2023-11-03 08:15:00
Buffer overflow
2023-11-03 08:15:00
cvelist
cvelist
CVE-2023-46846 Squid: request/response smuggling in http/1.1 and icap
2023-11-03 07:33:16
CVE-2023-46847 Squid: denial of service in http digest authentication
2023-11-03 07:58:05
veracode
veracode
HTTP Request Smuggling
2023-11-12 18:41:49
Denial Of Service (DoS)
2023-11-12 18:41:45
Denial Of Service (DoS)
2023-11-23 11:24:39
amazon
amazon
Important: squid
2024-04-25 16:04:00
Critical: squid
2023-10-25 21:15:00
Important: squid
2024-03-27 21:32:00
debiancve
debiancve
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46847
2023-11-03 08:15:08
centos
centos
squid security update
2024-01-12 19:20:23
alpinelinux
alpinelinux
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46846
2023-11-03 08:15:07
cloudlinux
cloudlinux
squid: Fix of CVE-2023-46847
2023-11-16 19:53:20
squid34: Fix of CVE-2023-46847
2023-11-29 19:34:27
cve
cve
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46847
2023-11-03 08:15:08
nvd
nvd
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46846
2023-11-03 08:15:07
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0689
2023-11-21 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0697
2023-12-06 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0154
2023-11-24 00:00:00

9.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

7.3 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.0%

JSON
Related for ALSA-2023:7213
oraclelinux7rocky3redhat14nessus39osv13almalinux3f51mageia1openvas11redos2ubuntu2redhatcve2debian3ubuntucve2prion2cvelist2veracode3amazon4debiancve2centos1alpinelinux2cloudlinux2cve2nvd2photon5