Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2023-0315
HistoryNov 10, 2023 - 2:37 a.m.

Updated squid packages fix security vulnerabilities

2023-11-1002:37:11
Gentoo Foundation
advisories.mageia.org
48
squid
security vulnerabilities
http/1.1
icap
cve-2023-46846
denial of service
http digest authentication
cve-2023-46847
ftp
cve-2023-46848

CVSS3

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

AI Score

7.4

Confidence

Low

EPSS

0.03

Percentile

91.1%

JSON

The updated packages fix security vulnerabilities: Request/Response smuggling in HTTP/1.1 and ICAP. (CVE-2023-46846) Denial of Service in HTTP Digest Authentication. (CVE-2023-46847) Denial of Service in FTP. (CVE-2023-46848)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchsquid< 5.9-1.1squid-5.9-1.1.mga9

Related

redhat 14
oraclelinux 7
nessus 44
almalinux 4
osv 15
rocky 3
f5 1
openvas 12
redos 2
ubuntu 2
rosalinux 1
ubuntucve 3
redhatcve 3
debian 3
prion 3
cvelist 3
veracode 4
debiancve 3
amazon 4
cloudlinux 2
alpinelinux 3
centos 1
cve 3
nvd 3
photon 6
redhat
redhat
(RHSA-2023:6268) Critical: squid security update
2023-11-02 09:34:15
(RHSA-2023:6748) Critical: squid security update
2023-11-07 10:08:53
(RHSA-2023:6266) Critical: squid security update
2023-11-02 09:25:23
oraclelinux
oraclelinux
squid security update
2023-11-03 00:00:00
squid security update
2023-11-16 00:00:00
squid:4 security update
2023-11-22 00:00:00
nessus
nessus
Oracle Linux 9 : squid (ELSA-2023-6748)
2023-11-16 00:00:00
AlmaLinux 9 : squid (ALSA-2023:6266)
2023-11-03 00:00:00
RHEL 9 : squid (RHSA-2023:6748)
2023-11-07 00:00:00
almalinux
almalinux
Critical: squid security update
2023-11-02 00:00:00
Critical: squid security update
2023-11-07 00:00:00
Critical: squid:4 security update
2023-11-02 00:00:00
osv
osv
Critical: squid security update
2023-11-02 00:00:00
Critical: squid security update
2023-11-11 23:00:06
Critical: squid security update
2023-11-07 00:00:00
rocky
rocky
squid security update
2023-11-11 23:00:06
squid:4 security update
2023-11-28 22:43:02
squid:4 security update
2023-11-11 22:59:08
f5
f5
K000137864 : Squid vulnerabilities CVE-2023-46846, CVE-2023-46847, CVE-2023-46848
2023-12-11 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0315)
2023-11-10 00:00:00
openSUSE: Security Advisory for squid (SUSE-SU-2023:4380-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4381-1)
2023-11-07 00:00:00
redos
redos
ROS-20231115-01
2023-11-15 00:00:00
ROS-20240521-02
2024-05-21 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2023-11-21 00:00:00
Squid vulnerabilities
2023-12-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2477
2024-09-25 09:36:11
ubuntucve
ubuntucve
CVE-2023-46846
2023-11-03 00:00:00
CVE-2023-46847
2023-11-03 00:00:00
CVE-2023-46848
2023-11-03 00:00:00
redhatcve
redhatcve
CVE-2023-46846
2023-10-27 08:57:59
CVE-2023-46847
2023-10-27 08:57:59
CVE-2023-46848
2023-10-27 09:27:52
debian
debian
[SECURITY] [DLA 3709-2] squid regression update
2024-01-22 18:56:25
[SECURITY] [DLA 3709-1] squid security update
2024-01-09 00:08:19
[SECURITY] [DSA 5637-1] squid security update
2024-03-08 14:36:16
prion
prion
Design/Logic Flaw
2023-11-03 08:15:00
Buffer overflow
2023-11-03 08:15:00
Input validation
2023-11-03 08:15:00
cvelist
cvelist
CVE-2023-46846 Squid: request/response smuggling in http/1.1 and icap
2023-11-03 07:33:16
CVE-2023-46847 Squid: denial of service in http digest authentication
2023-11-03 07:58:05
CVE-2023-46848 Squid: denial of service in ftp
2023-11-03 07:58:05
veracode
veracode
HTTP Request Smuggling
2023-11-12 18:41:49
Denial Of Service (DoS)
2023-11-12 18:41:45
Denial Of Service (DoS)
2023-11-23 11:24:39
debiancve
debiancve
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46848
2023-11-03 08:15:08
amazon
amazon
Important: squid
2024-04-25 16:04:00
Critical: squid
2023-10-25 21:15:00
Important: squid
2024-03-27 21:32:00
cloudlinux
cloudlinux
squid: Fix of CVE-2023-46847
2023-11-16 19:53:20
squid34: Fix of CVE-2023-46847
2023-11-29 19:34:27
alpinelinux
alpinelinux
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46848
2023-11-03 08:15:08
centos
centos
squid security update
2024-01-12 19:20:23
cve
cve
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46848
2023-11-03 08:15:08
nvd
nvd
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46848
2023-11-03 08:15:08
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0698
2023-12-10 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0689
2023-11-21 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0154
2023-11-24 00:00:00

CVSS3

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

AI Score

7.4

Confidence

Low

EPSS

0.03

Percentile

91.1%

JSON
Related for MGASA-2023-0315
redhat14oraclelinux7nessus44almalinux4osv15rocky3f51openvas12redos2ubuntu2rosalinux1ubuntucve3redhatcve3debian3prion3cvelist3veracode4debiancve3amazon4cloudlinux2alpinelinux3centos1cve3nvd3photon6