Lucene search
GoogleOSV:ALSA-2023:7213HistoryNov 14, 2023 - 12:00 a.m.
Critical: squid:4 security update
2023-11-1400:00:00
Google
osv.dev
10
squid
proxy
caching
server
security
update
denial of service
request/response smuggling
9.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
6.5 Medium
AI Score
Confidence
High
0.03 Low
EPSS
Percentile
91.0%
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
- squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
- squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
nessus
nessus
Oracle Linux 8 : squid:4 (ELSA-2023-7213)
2023-11-22 00:00:00
Oracle Linux 8 : squid:4 (ELSA-2023-6267)
2023-11-08 00:00:00
Rocky Linux 8 : squid:4 (RLSA-2023:6267)
2023-11-11 00:00:00
osv
osv
Critical: squid:4 security update
2023-11-28 22:43:02
Critical: squid:4 security update
2023-11-11 22:59:08
Critical: squid:4 security update
2023-11-02 00:00:00
oraclelinux
oraclelinux
squid:4 security update
2023-11-07 00:00:00
squid:4 security update
2023-11-22 00:00:00
squid security update
2023-11-03 00:00:00
rocky
rocky
squid:4 security update
2023-11-28 22:43:02
squid:4 security update
2023-11-11 22:59:08
squid security update
2023-11-11 23:00:06
redhat
redhat
(RHSA-2023:6804) Critical: squid:4 security update
2023-11-08 10:09:19
(RHSA-2023:6267) Critical: squid:4 security update
2023-11-02 09:32:58
(RHSA-2023:6810) Critical: squid:4 security update
2023-11-08 10:44:35
almalinux
almalinux
Critical: squid:4 security update
2023-11-14 00:00:00
Critical: squid:4 security update
2023-11-02 00:00:00
Critical: squid security update
2023-11-07 00:00:00
mageia
mageia
Updated squid packages fix security vulnerabilities
2023-11-10 02:37:11
f5
f5
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0315)
2023-11-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4384-1)
2023-11-09 00:00:00
openSUSE: Security Advisory for squid (SUSE-SU-2023:4380-1)
2024-03-04 00:00:00
redos
redos
ROS-20231115-01
2023-11-15 00:00:00
ROS-20240521-02
2024-05-21 00:00:00
redhatcve
redhatcve
CVE-2023-46846
2023-10-27 08:57:59
CVE-2023-46847
2023-10-27 08:57:59
debian
debian
[SECURITY] [DLA 3709-2] squid regression update
2024-01-22 18:56:25
[SECURITY] [DLA 3709-1] squid security update
2024-01-09 00:08:19
[SECURITY] [DSA 5637-1] squid security update
2024-03-08 14:36:16
ubuntucve
ubuntucve
CVE-2023-46846
2023-11-03 00:00:00
CVE-2023-46847
2023-11-03 00:00:00
veracode
veracode
HTTP Request Smuggling
2023-11-12 18:41:49
Denial Of Service (DoS)
2023-11-23 11:24:39
Denial Of Service (DoS)
2023-11-12 18:41:45
amazon
amazon
Important: squid
2024-04-25 16:04:00
Critical: squid
2023-10-25 21:15:00
Important: squid
2024-03-27 21:32:00
debiancve
debiancve
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46847
2023-11-03 08:15:08
prion
prion
Design/Logic Flaw
2023-11-03 08:15:00
Buffer overflow
2023-11-03 08:15:00
cvelist
cvelist
CVE-2023-46846 Squid: request/response smuggling in http/1.1 and icap
2023-11-03 07:33:16
CVE-2023-46847 Squid: denial of service in http digest authentication
2023-11-03 07:58:05
ubuntu
ubuntu
Squid vulnerabilities
2023-11-21 00:00:00
Squid vulnerabilities
2023-12-11 00:00:00
cloudlinux
cloudlinux
squid: Fix of CVE-2023-46847
2023-11-16 19:53:20
squid34: Fix of CVE-2023-46847
2023-11-29 19:34:27
centos
centos
squid security update
2024-01-12 19:20:23
alpinelinux
alpinelinux
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46846
2023-11-03 08:15:07
cve
cve
CVE-2023-46846
2023-11-03 08:15:07
CVE-2023-46847
2023-11-03 08:15:08
nvd
nvd
CVE-2023-46847
2023-11-03 08:15:08
CVE-2023-46846
2023-11-03 08:15:07
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0689
2023-11-21 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0697
2023-12-06 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0154
2023-11-24 00:00:00
9.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
6.5 Medium
AI Score
Confidence
High
0.03 Low
EPSS
Percentile
91.0%
Related for OSV:ALSA-2023:7213