CVE-2023-46847
Squid: denial of service in http digest authentication
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
8.6
Squid: denial of service in http digest authentication
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
CVE-2023-46847- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2023-51013
8.6
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
EUVD-2023-51013- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
NVD
8.6
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
CVE-2023-46847- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-46847
7.5
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
ALPINE-CVE-2023-46847- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-31902
7.5
CVE-2023-46847 affecting package squid 5.7-5
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
AZL-31902- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-63103
7.5
CVE-2023-46847 affecting package squid for versions less than 6.4-1
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
AZL-63103- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
Show 41 moreShow less
OSV
8.6
Squid: denial of service in http digest authentication
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
CVE-2023-46847- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-46847
7.5
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
DEBIAN-CVE-2023-46847- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1776
9.9
squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.
Security Fix(es):
Description: Due to chunked decoder lenience Squid is vulnerable to Request/Response smuggling attacks when parsing HTTP/1.1 and ICAP messages
Reference: https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh
Affected versions: 2.6-6.3. Patched in 6.4.(CVE-2023-46846)
Description: Due to a buffer overflow bug Squid is vulnerable to a Denial of Service attack against HTTP Digest Authentication
Reference: https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g
Affected versions: 3.2.0.1-5.9, 6.0-6.3(CVE-2023-46847)
- Record
OESA-2023-1776- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6266
9.3
Red Hat Security Advisory: squid security update
- Record
RHSA-2023:6266- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6267
9.3
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2023:6267- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6268
9.3
Red Hat Security Advisory: squid security update
- Record
RHSA-2023:6268- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6748
9.3
Red Hat Security Advisory: squid security update
- Record
RHSA-2023:6748- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6801
9.3
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2023:6801- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6803
9.3
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2023:6803- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6804
9.3
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2023:6804- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6805
8.6
Red Hat Security Advisory: squid security update
- Record
RHSA-2023:6805- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6810
9.3
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2023:6810- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:6882
8.6
Red Hat Security Advisory: squid34 security update
- Record
RHSA-2023:6882- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6884
8.6
Red Hat Security Advisory: squid security update
- Record
RHSA-2023:6884- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7213
9.3
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2023:7213- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:7576
8.6
Red Hat Security Advisory: squid security update
- Record
RHSA-2023:7576- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7578
8.6
Red Hat Security Advisory: squid security update
- Record
RHSA-2023:7578- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-46847
7.5
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Record
UBUNTU-CVE-2023-46847- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVALSA-2023:6266 No score
Critical: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
- SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
- SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
- SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:6266- Updated
- 2026-11-02
OSVALSA-2023:6267 No score
Critical: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
- SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
- SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:6267- Updated
- 2026-11-02
OSVALSA-2023:6748 No score
Critical: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
- squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
- squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
- squid: denial of Service in FTP (CVE-2023-46848)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:6748- Updated
- 2026-11-02
OSVALSA-2023:7213 No score
Critical: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
- squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
- squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:7213- Updated
- 2026-11-02
OSVCLSA-2023-1700160647 No score
Fix CVE(s): CVE-2023-46847
- SECURITY UPDATE: Denial of Service in HTTP Digest Authentication
- debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when parsing Digest Authorization
- CVE-2023-46847
- Record
CLSA-2023-1700160647- Updated
- 2026-11-02
OSVCLSA-2023-1700161185 No score
Fix CVE(s): CVE-2023-46847
- SECURITY UPDATE: denial of service in HTTP Digest Authentication
- debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when parsing Digest Authorization
- CVE-2023-46847
- Record
CLSA-2023-1700161185- Updated
- 2026-11-02
OSVCLSA-2023-1700161280 No score
squid: Fix of 3 CVEs
- CVE-2023-46846: Improve HTTP chunked encoding compliance
- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization
- CVE-2023-46848: Fix userinfo percent-encoding
- Record
CLSA-2023-1700161280- Updated
- 2026-11-02
OSVCLSA-2023-1700164396 No score
squid: Fix of CVE-2023-46847
- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization
- Record
CLSA-2023-1700164396- Updated
- 2026-11-02
OSVCLSA-2023-1700164647 No score
squid: Fix of CVE-2023-46847
- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization
- Record
CLSA-2023-1700164647- Updated
- 2026-11-02
OSVCLSA-2023-1700211046 No score
squid: Fix of 2 CVEs
- CVE-2023-46846: Improve HTTP chunked encoding compliance
- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization
- Record
CLSA-2023-1700211046- Updated
- 2026-11-02
OSVCLSA-2023-1701284898 No score
squid34: Fix of CVE-2023-46847
- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization
- Record
CLSA-2023-1701284898- Updated
- 2026-11-02
OSVCLSA-2023-1701286463 No score
squid34: Fix of CVE-2023-46847
- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization
- Record
CLSA-2023-1701286463- Updated
- 2026-11-02
OSVMGASA-2023-0315 No score
Updated squid packages fix security vulnerabilities
The updated packages fix security vulnerabilities:
Request/Response smuggling in HTTP/1.1 and ICAP. (CVE-2023-46846)
Denial of Service in HTTP Digest Authentication. (CVE-2023-46847)
Denial of Service in FTP. (CVE-2023-46848)
- Record
MGASA-2023-0315- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13398-1 No score
squid-6.4-1.1 on GA media
These are all security issues fixed in the squid-6.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13398-1- Updated
- 2026-11-02
OSVRLSA-2023:6266 No score
Critical: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
-
SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
-
SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
-
SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:6266- Updated
- 2026-11-02
OSVRLSA-2023:6267 No score
Critical: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
-
SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
-
SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:6267- Updated
- 2026-11-02
OSVRLSA-2023:7213 No score
Critical: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
-
squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
-
squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:7213- Updated
- 2026-11-02
OSVROOT-OS-ALPINE-318-CVE-2023-46847 No score
CVE-2023-46847 in squid - Patched by Root
Root has patched CVE-2023-46847 in the squid package for Root:Alpine:3.18. Multiple fixed versions available.
- Record
ROOT-OS-ALPINE-318-CVE-2023-46847- Updated
- 2026-11-02
OSVSUSE-SU-2023:4380-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500).
- CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495).
- CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803).
- CVE-2023-46848: Denial of Service in FTP (bsc#1216498).
- Record
SUSE-SU-2023:4380-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4381-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500).
- CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495).
- CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803).
- CVE-2023-46848: Denial of Service in FTP (bsc#1216498).
- Record
SUSE-SU-2023:4381-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4384-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500).
- CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495).
- CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803).
- CVE-2023-46848: Denial of Service in FTP (bsc#1216498).
- Record
SUSE-SU-2023:4384-1- Updated
- 2026-11-02
OSVUSN-6500-1 No score
squid vulnerabilities
Joshua Rogers discovered that Squid incorrectly handled validating certain SSL certificates. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-46724)
Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. Gopher support has been disabled in this update. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-46728)
Keran Mu and Jianjun Chen discovered that Squid incorrectly handled the chunked decoder. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks. (CVE-2023-46846)
Joshua Rogers discovered that Squid incorrectly handled HTTP Digest Authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-46847)
Joshua Rogers discovered that Squid incorrectly handled certain FTP urls. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-46848)
- Record
USN-6500-1- Updated
- 2026-11-02
OSVUSN-6500-2 No score
squid3 vulnerabilities
USN-6500-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. Gopher support has been disabled in this update. (CVE-2023-46728)
Joshua Rogers discovered that Squid incorrectly handled HTTP Digest Authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-46847)
- Record
USN-6500-2- Updated
- 2026-11-02
Affected products
- squid-cache squid
- red hat enterprise linux 6 extended lifecycle support
- red hat enterprise linux 7
- red hat enterprise linux 7.6 advanced update support
- red hat enterprise linux 7.7 advanced update support
- red hat enterprise linux 8
- red hat enterprise linux 8.1 update services for sap solutions
- red hat enterprise linux 8.2 advanced update support
- red hat enterprise linux 8.2 telecommunications update service
- red hat enterprise linux 8.2 update services for sap solutions
- red hat enterprise linux 8.4 advanced mission critical update support
- red hat enterprise linux 8.4 telecommunications update service
Show 13 moreShow less
- red hat enterprise linux 8.4 update services for sap solutions
- red hat enterprise linux 8.6 extended update support
- red hat enterprise linux 9
- red hat enterprise linux 9.0 extended update support
- redhat enterprise linux
- redhat enterprise linux eus
- redhat enterprise linux for arm 64
- redhat enterprise linux for ibm z systems
- redhat enterprise linux for power little endian
- redhat enterprise linux server
- redhat enterprise linux server aus
- redhat enterprise linux server tus
- redhat enterprise linux workstation
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidAlpine:v3.19 |
3.2.0.1 up to 6.4-r0 | 6.4-r0 |
squidAlpine:v3.20 |
3.2.0.1 up to 6.4-r0 | 6.4-r0 |
squidAlpine:v3.21 |
3.2.0.1 up to 6.4-r0 | 6.4-r0 |
squidAlpine:v3.22 |
3.2.0.1 up to 6.4-r0 | 6.4-r0 |
squidAlpine:v3.23 |
3.2.0.1 up to 6.4-r0 | 6.4-r0 |
squidAlpine:v3.24 |
3.2.0.1 up to 6.4-r0 | 6.4-r0 |
squidAlmaLinux:9 From an advisory covering 3 CVEs |
before 7:5.5-5.el9_2.1 | 7:5.5-5.el9_2.1 |
libecapAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.0.1-2.module_el8.6.0+2741+01592ae8 | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
libecapAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.0.1-2.module_el8.6.0+3048+383bc947 | 1.0.1-2.module_el8.6.0+3048+383bc947 |
libecap-develAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.0.1-2.module_el8.6.0+2741+01592ae8 | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
Show 168 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libecap-develAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.0.1-2.module_el8.6.0+3048+383bc947 | 1.0.1-2.module_el8.6.0+3048+383bc947 |
squidAlmaLinux:8 From an advisory covering 2 CVEs |
before 7:4.15-6.module_el8.8.0+3670+56cb3c8e.1.alma.1 | 7:4.15-6.module_el8.8.0+3670+56cb3c8e.1.alma.1 |
squidAlmaLinux:9 From an advisory covering 3 CVEs |
before 7:5.5-6.el9_3.1 | 7:5.5-6.el9_3.1 |
squidAlmaLinux:8 From an advisory covering 2 CVEs |
before 7:4.15-7.module_el8.9.0+3680+f9142978.1.alma.1 | 7:4.15-7.module_el8.9.0+3680+f9142978.1.alma.1 |
squidAzure Linux:2 |
through 5.7-5 | None known |
squidAzure Linux:3 |
before 6.4-1 | 6.4-1 |
squidTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els1 | 3.5.27-1ubuntu1.14+tuxcare.els1 |
squid-cgiTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els1 | 3.5.27-1ubuntu1.14+tuxcare.els1 |
squid-commonTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els1 | 3.5.27-1ubuntu1.14+tuxcare.els1 |
squid-purgeTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els1 | 3.5.27-1ubuntu1.14+tuxcare.els1 |
squid3TuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els1 | 3.5.27-1ubuntu1.14+tuxcare.els1 |
squidclientTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els1 | 3.5.27-1ubuntu1.14+tuxcare.els1 |
squidTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els3 | 3.5.12-1ubuntu7.17+tuxcare.els3 |
squid-cgiTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els3 | 3.5.12-1ubuntu7.17+tuxcare.els3 |
squid-commonTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els3 | 3.5.12-1ubuntu7.17+tuxcare.els3 |
squid-purgeTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els3 | 3.5.12-1ubuntu7.17+tuxcare.els3 |
squid3TuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els3 | 3.5.12-1ubuntu7.17+tuxcare.els3 |
squidclientTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els3 | 3.5.12-1ubuntu7.17+tuxcare.els3 |
squidTuxCare:CentOS:8.5 From an advisory covering 3 CVEs |
before 7:4.15-1.module_el8.5.0+2143+24c223d9.tuxcare.els4 | 7:4.15-1.module_el8.5.0+2143+24c223d9.tuxcare.els4 |
squidTuxCare:CentOS:6 |
before 7:3.1.23-30.el6.tuxcare.els8 | 7:3.1.23-30.el6.tuxcare.els8 |
squidTuxCare:OracleLinux:6 |
before 7:3.1.23-30.el6.tuxcare.els8 | 7:3.1.23-30.el6.tuxcare.els8 |
squidTuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 7:4.11-4.module_el8.4.0+2144+2063f9d1.2.tuxcare.els5 | 7:4.11-4.module_el8.4.0+2144+2063f9d1.2.tuxcare.els5 |
squid34TuxCare:OracleLinux:6 |
before 7:3.4.14-16.el6.tuxcare.els4 | 7:3.4.14-16.el6.tuxcare.els4 |
squid34TuxCare:CentOS:6 |
before 7:3.4.14-16.el6.tuxcare.els4 | 7:3.4.14-16.el6.tuxcare.els4 |
squidDebian:12 |
before 5.7-2+deb12u1, plus listed versions 5.7-2 |
5.7-2+deb12u1 |
squidDebian:13 |
before 6.5-1 | 6.5-1 |
squidDebian:14 |
before 6.5-1 | 6.5-1 |
squidDebian:10 From an advisory covering 5 CVEs |
before 4.6-1+deb10u9, plus listed versions 4.6-14.6-1+deb10u14.6-1+deb10u24.6-1+deb10u34.6-1+deb10u4 Show 4 moreShow less4.6-1+deb10u54.6-1+deb10u64.6-1+deb10u74.6-1+deb10u8 |
4.6-1+deb10u9 |
squidDebian:11 From an advisory covering 8 CVEs |
before 4.13-10+deb11u3, plus listed versions 4.13-104.13-10+deb11u14.13-10+deb11u2 |
4.13-10+deb11u3 |
squidDebian:12 From an advisory covering 8 CVEs |
before 5.7-2+deb12u1, plus listed versions 5.7-2 |
5.7-2+deb12u1 |
squidMageia:9 From an advisory covering 3 CVEs |
before 5.9-1.1.mga9 | 5.9-1.1.mga9 |
squidopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.9-14.oe1 | 4.9-14.oe1 |
squidopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 4.9-14.oe1 | 4.9-14.oe1 |
squidopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 4.9-18.oe2203sp2 | 4.9-18.oe2203sp2 |
squidopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.9-18.oe2203sp1 | 4.9-18.oe2203sp1 |
squidopenEuler:22.03-LTS-SP2 From an advisory covering 2 CVEs |
before 4.9-18.oe2203sp2 | 4.9-18.oe2203sp2 |
squidRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 7:5.5-5.el9_2.1 | 7:5.5-5.el9_2.1 |
squid-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 7:5.5-5.el9_2.1 | 7:5.5-5.el9_2.1 |
squid-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 7:5.5-5.el9_2.1 | 7:5.5-5.el9_2.1 |
libecapRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 7:4.15-6.module+el8.8.0+20569+26050b0f.1 | 7:4.15-6.module+el8.8.0+20569+26050b0f.1 |
squid-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 7:4.15-6.module+el8.8.0+20569+26050b0f.1 | 7:4.15-6.module+el8.8.0+20569+26050b0f.1 |
squid-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 7:4.15-6.module+el8.8.0+20569+26050b0f.1 | 7:4.15-6.module+el8.8.0+20569+26050b0f.1 |
squidRed Hat:rhel_eus:9.0::appstream From an advisory covering 3 CVEs |
before 7:5.2-1.el9_0.3 | 7:5.2-1.el9_0.3 |
squid-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 3 CVEs |
before 7:5.2-1.el9_0.3 | 7:5.2-1.el9_0.3 |
squid-debugsourceRed Hat:rhel_eus:9.0::appstream From an advisory covering 3 CVEs |
before 7:5.2-1.el9_0.3 | 7:5.2-1.el9_0.3 |
squidRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 7:5.5-6.el9_3.1 | 7:5.5-6.el9_3.1 |
squid-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 7:5.5-6.el9_3.1 | 7:5.5-6.el9_3.1 |
squid-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 7:5.5-6.el9_3.1 | 7:5.5-6.el9_3.1 |
libecapRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 7:4.15-3.module+el8.6.0+20581+c33b42aa.3 | 7:4.15-3.module+el8.6.0+20581+c33b42aa.3 |
squid-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 7:4.15-3.module+el8.6.0+20581+c33b42aa.3 | 7:4.15-3.module+el8.6.0+20581+c33b42aa.3 |
squid-debugsourceRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 7:4.15-3.module+el8.6.0+20581+c33b42aa.3 | 7:4.15-3.module+el8.6.0+20581+c33b42aa.3 |
libecapRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
squid-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
squid-debugsourceRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
libecapRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
squid-debuginfoRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
squid-debugsourceRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
libecapRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
squid-debuginfoRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
squid-debugsourceRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 | 7:4.4-8.module+el8.2.0+20588+7f9884cb.6 |
libecapRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
squid-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
squid-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
libecapRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
squid-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
squid-debugsourceRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
libecapRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
squid-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
squid-debugsourceRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 7:4.11-4.module+el8.4.0+20587+c1238193.5 | 7:4.11-4.module+el8.4.0+20587+c1238193.5 |
squidRed Hat:enterprise_linux:7::server |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
squid-debuginfoRed Hat:enterprise_linux:7::server |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
squid-migration-scriptRed Hat:enterprise_linux:7::server |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
squid-sysvinitRed Hat:enterprise_linux:7::server |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
squidRed Hat:enterprise_linux:7::workstation |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
squid-debuginfoRed Hat:enterprise_linux:7::workstation |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
squid-migration-scriptRed Hat:enterprise_linux:7::workstation |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
squid-sysvinitRed Hat:enterprise_linux:7::workstation |
before 7:3.5.20-17.el7_9.9 | 7:3.5.20-17.el7_9.9 |
libecapRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.1.0+20589+bb91f53c.6 | 7:4.4-8.module+el8.1.0+20589+bb91f53c.6 |
squid-debuginfoRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.1.0+20589+bb91f53c.6 | 7:4.4-8.module+el8.1.0+20589+bb91f53c.6 |
squid-debugsourceRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 7:4.4-8.module+el8.1.0+20589+bb91f53c.6 | 7:4.4-8.module+el8.1.0+20589+bb91f53c.6 |
squid34Red Hat:rhel_els:6 |
before 7:3.4.14-15.el6_10.1 | 7:3.4.14-15.el6_10.1 |
squid34-debuginfoRed Hat:rhel_els:6 |
before 7:3.4.14-15.el6_10.1 | 7:3.4.14-15.el6_10.1 |
squidRed Hat:rhel_els:6 |
before 7:3.1.23-24.el6_10.1 | 7:3.1.23-24.el6_10.1 |
squid-debuginfoRed Hat:rhel_els:6 |
before 7:3.1.23-24.el6_10.1 | 7:3.1.23-24.el6_10.1 |
libecapRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
libecap-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
libecap-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
libecap-develRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
squidRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 7:4.15-7.module+el8.9.0+20571+8d39338b.1 | 7:4.15-7.module+el8.9.0+20571+8d39338b.1 |
squid-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 7:4.15-7.module+el8.9.0+20571+8d39338b.1 | 7:4.15-7.module+el8.9.0+20571+8d39338b.1 |
squid-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 7:4.15-7.module+el8.9.0+20571+8d39338b.1 | 7:4.15-7.module+el8.9.0+20571+8d39338b.1 |
squidRed Hat:rhel_aus:7.7::server |
before 7:3.5.20-13.el7_7.1 | 7:3.5.20-13.el7_7.1 |
squid-debuginfoRed Hat:rhel_aus:7.7::server |
before 7:3.5.20-13.el7_7.1 | 7:3.5.20-13.el7_7.1 |
squid-migration-scriptRed Hat:rhel_aus:7.7::server |
before 7:3.5.20-13.el7_7.1 | 7:3.5.20-13.el7_7.1 |
squid-sysvinitRed Hat:rhel_aus:7.7::server |
before 7:3.5.20-13.el7_7.1 | 7:3.5.20-13.el7_7.1 |
squidRed Hat:rhel_aus:7.6::server |
before 7:3.5.20-12.el7_6.2 | 7:3.5.20-12.el7_6.2 |
squid-debuginfoRed Hat:rhel_aus:7.6::server |
before 7:3.5.20-12.el7_6.2 | 7:3.5.20-12.el7_6.2 |
squid-migration-scriptRed Hat:rhel_aus:7.6::server |
before 7:3.5.20-12.el7_6.2 | 7:3.5.20-12.el7_6.2 |
squid-sysvinitRed Hat:rhel_aus:7.6::server |
before 7:3.5.20-12.el7_6.2 | 7:3.5.20-12.el7_6.2 |
squidRocky Linux:9 From an advisory covering 3 CVEs |
before 7:5.5-5.el9_2.1 | 7:5.5-5.el9_2.1 |
libecapRocky Linux:8 From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.4.0+404+316a0dc5 | 0:1.0.1-2.module+el8.4.0+404+316a0dc5 |
squidRocky Linux:8 From an advisory covering 2 CVEs |
before 7:4.15-6.module+el8.8.0+1273+55f5b063 | 7:4.15-6.module+el8.8.0+1273+55f5b063 |
libecapRocky Linux:8 From an advisory covering 2 CVEs |
before 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0 | 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0 |
squidRocky Linux:8 From an advisory covering 2 CVEs |
before 7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1 | 7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1 |
squidRoot:Alpine:3.18 |
before 5.9-r00071 | 5.9-r000715.9-r000745.9-r000735.9-r000725.9-r00075 |
rootio-squidRoot:Alpine:3.18 |
before 5.9-r00071 | 5.9-r000715.9-r000745.9-r000735.9-r000725.9-r00075 |
squidSUSE:Linux Enterprise Module for Server Applications 15 SP4 From an advisory covering 4 CVEs |
before 5.7-150400.3.12.1 | 5.7-150400.3.12.1 |
squidSUSE:Linux Enterprise Module for Server Applications 15 SP5 From an advisory covering 4 CVEs |
before 5.7-150400.3.12.1 | 5.7-150400.3.12.1 |
squidopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 5.7-150400.3.12.1 | 5.7-150400.3.12.1 |
squidopenSUSE:Leap 15.5 From an advisory covering 4 CVEs |
before 5.7-150400.3.12.1 | 5.7-150400.3.12.1 |
squidSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs |
before 4.17-4.30.1 | 4.17-4.30.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs |
before 4.17-4.30.1 | 4.17-4.30.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squidSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 4.17-150000.5.38.1 | 4.17-150000.5.38.1 |
squid3Ubuntu:Pro:16.04:LTS |
before 3.5.12-1ubuntu7.16+esm2, plus listed versions 3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1 Show 16 moreShow less3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm1 |
3.5.12-1ubuntu7.16+esm2 |
squid3Ubuntu:Pro:18.04:LTS |
before 3.5.27-1ubuntu1.14+esm1, plus listed versions 3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2 Show 12 moreShow less3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.14 |
3.5.27-1ubuntu1.14+esm1 |
squidUbuntu:20.04:LTS |
before 4.10-1ubuntu1.8, plus listed versions 4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3 Show 9 moreShow less4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.7 |
4.10-1ubuntu1.8 |
squidUbuntu:22.04:LTS |
before 5.7-0ubuntu0.22.04.2, plus listed versions 4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.15.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.1 |
5.7-0ubuntu0.22.04.2 |
squidUbuntu:20.04:LTS From an advisory covering 5 CVEs |
before 4.10-1ubuntu1.8, plus listed versions 4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3 Show 9 moreShow less4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.7 |
4.10-1ubuntu1.8 |
squidUbuntu:22.04:LTS From an advisory covering 5 CVEs |
before 5.7-0ubuntu0.22.04.2, plus listed versions 4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.15.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.1 |
5.7-0ubuntu0.22.04.2 |
squid3Ubuntu:Pro:16.04:LTS From an advisory covering 2 CVEs |
before 3.5.12-1ubuntu7.16+esm2, plus listed versions 3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1 Show 16 moreShow less3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm1 |
3.5.12-1ubuntu7.16+esm2 |
squid3Ubuntu:Pro:18.04:LTS From an advisory covering 2 CVEs |
before 3.5.27-1ubuntu1.14+esm1, plus listed versions 3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2 Show 12 moreShow less3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.14 |
3.5.27-1ubuntu1.14+esm1 |
squidopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 6.4-1.1 | 6.4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-46847 is a high vulnerability (CVSS 8.6) in Squid-cache Squid, published November 2, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 78.5%, the 99th percentile. Fixed in squid 6.4-r0.
References
access.redhat.com/errata/RHSA-2023:6266
access.redhat.com/errata/RHSA-2023:6267
access.redhat.com/errata/RHSA-2023:6268
access.redhat.com/errata/RHSA-2023:6748
access.redhat.com/errata/RHSA-2023:6801
access.redhat.com/errata/RHSA-2023:6803
Show 87 moreShow less
access.redhat.com/errata/RHSA-2023:6804
access.redhat.com/errata/RHSA-2023:6805
access.redhat.com/errata/RHSA-2023:6810
access.redhat.com/errata/RHSA-2023:6882
access.redhat.com/errata/RHSA-2023:6884
access.redhat.com/errata/RHSA-2023:7213
access.redhat.com/errata/RHSA-2023:7576
access.redhat.com/errata/RHSA-2023:7578
access.redhat.com/security/cve/CVE-2023-46847
bugzilla.redhat.com/show_bug.cgi?id=2245916
github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g
lists.debian.org/debian-lts-announce/2024/01/msg00003.html
security.netapp.com/advisory/ntap-20231130-0002
security.alpinelinux.org/vuln/CVE-2023-46847
access.redhat.com/security/cve/CVE-2023-46846
access.redhat.com/security/cve/CVE-2023-46848
bugzilla.redhat.com/2245910
bugzilla.redhat.com/2245916
bugzilla.redhat.com/2245919
errata.almalinux.org/9/ALSA-2023-6266.html
errata.almalinux.org/8/ALSA-2023-6267.html
errata.almalinux.org/9/ALSA-2023-6748.html
errata.almalinux.org/8/ALSA-2023-7213.html
nvd.nist.gov/vuln/detail/CVE-2023-46847
errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1700160647
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1700161185
errata.cloudlinux.com/centos8.5-els/CLSA-2023-1700161280.html
errata.cloudlinux.com/els6/CLSA-2023-1700164396.html
errata.cloudlinux.com/ol6/CLSA-2023-1700164647.html
errata.cloudlinux.com/centos8.4-els/CLSA-2023-1700211046.html
errata.cloudlinux.com/ol6/CLSA-2023-1701284898.html
errata.cloudlinux.com/els6/CLSA-2023-1701286463.html
access.redhat.com/downloads/content/package-browser
github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46847.json
github.com/squid-cache/squid
security-tracker.debian.org/tracker/CVE-2023-46847
advisories.mageia.org/MGASA-2023-0315.html
bugs.mageia.org/show_bug.cgi?id=32486
github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh
github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1776
nvd.nist.gov/vuln/detail/CVE-2023-46846
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2245910
bugzilla.redhat.com/show_bug.cgi?id=2245919
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6266.json
cve.org/CVERecord?id=CVE-2023-46846
cve.org/CVERecord?id=CVE-2023-46847
cve.org/CVERecord?id=CVE-2023-46848
nvd.nist.gov/vuln/detail/CVE-2023-46848
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6267.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6268.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6748.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6801.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6803.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6804.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6805.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6810.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6882.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6884.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7213.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7576.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7578.json
errata.rockylinux.org/RLSA-2023:6266
errata.rockylinux.org/RLSA-2023:6267
errata.rockylinux.org/RLSA-2023:7213
suse.com/support/update/announcement/2023/suse-su-20234380-1
bugzilla.suse.com/1216495
bugzilla.suse.com/1216498
bugzilla.suse.com/1216500
bugzilla.suse.com/1216803
suse.com/security/cve/CVE-2023-46724
suse.com/security/cve/CVE-2023-46846
suse.com/security/cve/CVE-2023-46847
suse.com/security/cve/CVE-2023-46848
suse.com/support/update/announcement/2023/suse-su-20234381-1
suse.com/support/update/announcement/2023/suse-su-20234384-1
ubuntu.com/security/CVE-2023-46847
lists.squid-cache.org/pipermail/squid-announce/2023-October/000154.html
megamansec.github.io/Squid-Security-Audit/digest-overflow.html
ubuntu.com/security/notices/USN-6500-1
ubuntu.com/security/notices/USN-6500-2
ubuntu.com/security/CVE-2023-46724
ubuntu.com/security/CVE-2023-46728
ubuntu.com/security/CVE-2023-46846
ubuntu.com/security/CVE-2023-46848
suse.com/security/cve/CVE-2023-5824