(RHSA-2023:7213) Critical: squid:4 security update

2023-11-1417:05:01

access.redhat.com

rhsa-2023-7213

squid

proxy server

http

denial of service

cvss

cve-2023-46847

request/response smuggling

icap

CVSS3

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

AI Score

7.4

Confidence

Low

EPSS

0.03

Percentile

91.1%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xlibecap-debugsource< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHatanyaarch64libecap-debuginfo< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debuginfo-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHatanyx86_64libecap-debugsource< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHatanyppc64lelibecap< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHatanyppc64lesquid< 4.15-7.module+el8.9.0+20571+8d39338b.1squid-4.15-7.module+el8.9.0+20571+8d39338b.1.ppc64le.rpm
RedHatanys390xlibecap-devel< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHatanyaarch64libecap-devel< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHatanyppc64lelibecap-debugsource< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHatanys390xlibecap-debuginfo< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debuginfo-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHatanyx86_64squid< 4.15-7.module+el8.9.0+20571+8d39338b.1squid-4.15-7.module+el8.9.0+20571+8d39338b.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	libecap-debugsource	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHat	any	aarch64	libecap-debuginfo	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debuginfo-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHat	any	x86_64	libecap-debugsource	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHat	any	ppc64le	libecap	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHat	any	ppc64le	squid	< 4.15-7.module+el8.9.0+20571+8d39338b.1	squid-4.15-7.module+el8.9.0+20571+8d39338b.1.ppc64le.rpm
RedHat	any	s390x	libecap-devel	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHat	any	aarch64	libecap-devel	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHat	any	ppc64le	libecap-debugsource	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHat	any	s390x	libecap-debuginfo	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debuginfo-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHat	any	x86_64	squid	< 4.15-7.module+el8.9.0+20571+8d39338b.1	squid-4.15-7.module+el8.9.0+20571+8d39338b.1.x86_64.rpm