CVE-2023-46728
SQUID-2021:8 Denial of Service in Gopher gateway
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.5
SQUID-2021:8 Denial of Service in Gopher gateway
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
- Record
CVE-2023-46728- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2023-50910
7.5
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
- Record
EUVD-2023-50910- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
NVD
7.5
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
- Record
CVE-2023-46728- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVAZL-31941
7.5
CVE-2023-46728 affecting package squid 5.7-5
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
- Record
AZL-31941- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
7.5
SQUID-2021:8 Denial of Service in Gopher gateway
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
- Record
CVE-2023-46728- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-46728
7.5
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
- Record
DEBIAN-CVE-2023-46728- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 27 moreShow less
OSVOESA-2023-1794
8.6
squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.
Security Fix(es):
Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using --with-openssl are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.(CVE-2023-46724)
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.(CVE-2023-46728)
- Record
OESA-2023-1794- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0046
7.5
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2024:0046- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0071
7.5
Red Hat Security Advisory: squid security update
- Record
RHSA-2024:0071- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0072
8.9
Red Hat Security Advisory: squid security update
- Record
RHSA-2024:0072- CVSS 3.1
- 8.9 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVRHSA-2024:0397
8.9
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2024:0397- CVSS 3.1
- 8.9 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVRHSA-2024:0771
8.9
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2024:0771- CVSS 3.1
- 8.9 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVRHSA-2024:0772
8.9
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2024:0772- CVSS 3.1
- 8.9 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVRHSA-2024:0773
8.9
Red Hat Security Advisory: squid:4 security update
- Record
RHSA-2024:0773- CVSS 3.1
- 8.9 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVRHSA-2024:1153
8.9
Red Hat Security Advisory: squid security update
- Record
RHSA-2024:1153- CVSS 3.1
- 8.9 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVRHSA-2024:1787
8.6
Red Hat Security Advisory: squid security update
- Record
RHSA-2024:1787- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2024:0046
7.5
Important: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
-
squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
-
squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
-
squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
-
squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:0046- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-46728
7.5
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
- Record
UBUNTU-CVE-2023-46728- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2024:0046 No score
Important: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
- squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
- squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
- squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
- squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:0046- Updated
- 2026-11-02
OSVALSA-2024:0071 No score
Important: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
- squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
- squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
- squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
- squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:0071- Updated
- 2026-11-02
OSVCLSA-2023-1702420408 No score
Fix CVE(s): CVE-2023-46728
- SECURITY UPDATE: Denial of Service attack against Squid’s Gopher
gateway due to a NULL pointer dereference bug
- debian/patches/CVE-2023-46728.patch: remove support for Gopher protocol
- CVE-2023-46728
- Record
CLSA-2023-1702420408- Updated
- 2026-11-02
OSVCLSA-2023-1702420474 No score
Fix CVE(s): CVE-2023-46728
- SECURITY UPDATE: Denial of Service attack against Squid’s Gopher
gateway due to a NULL pointer dereference bug
- debian/patches/CVE-2023-46728.patch: Remove support for Gopher protocol
- CVE-2023-46728
- Record
CLSA-2023-1702420474- Updated
- 2026-11-02
OSVCLSA-2023-1702495324 No score
squid: Fix of CVE-2023-46728
- CVE-2023-46728: Remove support for Gopher protocol
- Record
CLSA-2023-1702495324- Updated
- 2026-11-02
OSVCLSA-2023-1702495594 No score
squid: Fix of CVE-2023-46728
- CVE-2023-46728: Remove support for Gopher protocol
- Record
CLSA-2023-1702495594- Updated
- 2026-11-02
OSVCLSA-2023-1702495796 No score
squid: Fix of CVE-2023-46728
- CVE-2023-46728: Remove support for Gopher protocol
- Enable test-suite
- Record
CLSA-2023-1702495796- Updated
- 2026-11-02
OSVCLSA-2023-1702495907 No score
squid34: Fix of CVE-2023-46728
- CVE-2023-46728: Remove support for Gopher protocol
- Record
CLSA-2023-1702495907- Updated
- 2026-11-02
OSVCLSA-2023-1702496332 No score
squid: Fix of CVE-2023-46728
- CVE-2023-46728: Remove support for Gopher protocol
- Enable test-suite
- Record
CLSA-2023-1702496332- Updated
- 2026-11-02
OSVCLSA-2023-1702496473 No score
squid34: Fix of CVE-2023-46728
- CVE-2023-46728: Remove support for Gopher protocol
- Record
CLSA-2023-1702496473- Updated
- 2026-11-02
OSVSUSE-SU-2023:4544-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2023-46728: Remove gopher support (bsc#1216926).
- Fixed overread in HTTP request header parsing (bsc#1217274).
- Record
SUSE-SU-2023:4544-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4545-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2023-46728: Remove gopher support (bsc#1216926).
- Fixed overread in HTTP request header parsing (bsc#1217274).
- Record
SUSE-SU-2023:4545-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4589-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2023-46728: Remove gopher support (bsc#1216926).
- Fixed overread in HTTP request header parsing (bsc#1217274).
- Record
SUSE-SU-2023:4589-1- Updated
- 2026-11-02
OSVUSN-6500-1 No score
squid vulnerabilities
Joshua Rogers discovered that Squid incorrectly handled validating certain SSL certificates. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-46724)
Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. Gopher support has been disabled in this update. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-46728)
Keran Mu and Jianjun Chen discovered that Squid incorrectly handled the chunked decoder. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks. (CVE-2023-46846)
Joshua Rogers discovered that Squid incorrectly handled HTTP Digest Authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-46847)
Joshua Rogers discovered that Squid incorrectly handled certain FTP urls. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-46848)
- Record
USN-6500-1- Updated
- 2026-11-02
OSVUSN-6500-2 No score
squid3 vulnerabilities
USN-6500-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. Gopher support has been disabled in this update. (CVE-2023-46728)
Joshua Rogers discovered that Squid incorrectly handled HTTP Digest Authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-46847)
- Record
USN-6500-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libecapAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.0.1-2.module_el8.6.0+2741+01592ae8 | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
libecapAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.0.1-2.module_el8.6.0+3048+383bc947 | 1.0.1-2.module_el8.6.0+3048+383bc947 |
libecap-develAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.0.1-2.module_el8.6.0+2741+01592ae8 | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
libecap-develAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.0.1-2.module_el8.6.0+3048+383bc947 | 1.0.1-2.module_el8.6.0+3048+383bc947 |
squidAlmaLinux:8 From an advisory covering 4 CVEs |
before 7:4.15-7.module_el8.9.0+3708+6acaac63.5 | 7:4.15-7.module_el8.9.0+3708+6acaac63.5 |
squidAlmaLinux:9 From an advisory covering 4 CVEs |
before 7:5.5-6.el9_3.5 | 7:5.5-6.el9_3.5 |
squidAzure Linux:2 |
through 5.7-5 | None known |
squidTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els4 | 3.5.12-1ubuntu7.17+tuxcare.els4 |
squid-cgiTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els4 | 3.5.12-1ubuntu7.17+tuxcare.els4 |
squid-commonTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els4 | 3.5.12-1ubuntu7.17+tuxcare.els4 |
Show 131 moreShow less
| Package | Affected | Fixed |
|---|---|---|
squid-purgeTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els4 | 3.5.12-1ubuntu7.17+tuxcare.els4 |
squid3TuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els4 | 3.5.12-1ubuntu7.17+tuxcare.els4 |
squidclientTuxCare:Ubuntu:16.04 |
before 3.5.12-1ubuntu7.17+tuxcare.els4 | 3.5.12-1ubuntu7.17+tuxcare.els4 |
squidTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els2 | 3.5.27-1ubuntu1.14+tuxcare.els2 |
squid-cgiTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els2 | 3.5.27-1ubuntu1.14+tuxcare.els2 |
squid-commonTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els2 | 3.5.27-1ubuntu1.14+tuxcare.els2 |
squid-purgeTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els2 | 3.5.27-1ubuntu1.14+tuxcare.els2 |
squid3TuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els2 | 3.5.27-1ubuntu1.14+tuxcare.els2 |
squidclientTuxCare:Ubuntu:18.04 |
before 3.5.27-1ubuntu1.14+tuxcare.els2 | 3.5.27-1ubuntu1.14+tuxcare.els2 |
squidTuxCare:CentOS:8.4 |
before 7:4.11-4.module_el8.4.0+2159+2063f9d1.2.tuxcare.els7 | 7:4.11-4.module_el8.4.0+2159+2063f9d1.2.tuxcare.els7 |
squidTuxCare:CentOS:8.5 |
before 7:4.15-1.module_el8.5.0+2160+24c223d9.tuxcare.els6 | 7:4.15-1.module_el8.5.0+2160+24c223d9.tuxcare.els6 |
squidTuxCare:OracleLinux:6 |
before 7:3.1.23-30.el6.tuxcare.els9 | 7:3.1.23-30.el6.tuxcare.els9 |
squid34TuxCare:OracleLinux:6 |
before 7:3.4.14-16.el6.tuxcare.els5 | 7:3.4.14-16.el6.tuxcare.els5 |
squidTuxCare:CentOS:6 |
before 7:3.1.23-30.el6.tuxcare.els9 | 7:3.1.23-30.el6.tuxcare.els9 |
squid34TuxCare:CentOS:6 |
before 7:3.4.14-16.el6.tuxcare.els5 | 7:3.4.14-16.el6.tuxcare.els5 |
squidDebian:12 |
before 5.7-2+deb12u5, plus listed versions 5.7-25.7-2+deb12u15.7-2+deb12u25.7-2+deb12u35.7-2+deb12u4 |
5.7-2+deb12u5 |
squidDebian:13 |
before 6.1-1 | 6.1-1 |
squidDebian:14 |
before 6.1-1 | 6.1-1 |
squidDebian:11 From an advisory covering 3 CVEs |
before 4.13-10+deb11u5, plus listed versions 4.13-104.13-10+deb11u14.13-10+deb11u24.13-10+deb11u34.13-10+deb11u4 |
4.13-10+deb11u5 |
squidopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.9-16.oe1 | 4.9-16.oe1 |
squidopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 4.9-16.oe1 | 4.9-16.oe1 |
squidopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 4.9-20.oe2203sp2 | 4.9-20.oe2203sp2 |
squidopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.9-20.oe2203sp1 | 4.9-20.oe2203sp1 |
squidopenEuler:22.03-LTS-SP2 From an advisory covering 2 CVEs |
before 4.9-20.oe2203sp2 | 4.9-20.oe2203sp2 |
libecapRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
libecap-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
libecap-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
libecap-develRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 |
squidRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 7:4.15-7.module+el8.9.0+20975+25f17541.5 | 7:4.15-7.module+el8.9.0+20975+25f17541.5 |
squid-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 7:4.15-7.module+el8.9.0+20975+25f17541.5 | 7:4.15-7.module+el8.9.0+20975+25f17541.5 |
squid-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 7:4.15-7.module+el8.9.0+20975+25f17541.5 | 7:4.15-7.module+el8.9.0+20975+25f17541.5 |
squidRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 7:5.5-6.el9_3.5 | 7:5.5-6.el9_3.5 |
squid-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 7:5.5-6.el9_3.5 | 7:5.5-6.el9_3.5 |
squid-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 7:5.5-6.el9_3.5 | 7:5.5-6.el9_3.5 |
squidRed Hat:rhel_eus:9.2::appstream From an advisory covering 6 CVEs |
before 7:5.5-5.el9_2.3 | 7:5.5-5.el9_2.3 |
squid-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 6 CVEs |
before 7:5.5-5.el9_2.3 | 7:5.5-5.el9_2.3 |
squid-debugsourceRed Hat:rhel_eus:9.2::appstream From an advisory covering 6 CVEs |
before 7:5.5-5.el9_2.3 | 7:5.5-5.el9_2.3 |
libecapRed Hat:rhel_eus:8.8::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_eus:8.8::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_eus:8.8::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_eus:8.8::appstream From an advisory covering 7 CVEs |
before 7:4.15-6.module+el8.8.0+21068+0ecbc070.3 | 7:4.15-6.module+el8.8.0+21068+0ecbc070.3 |
squid-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 7 CVEs |
before 7:4.15-6.module+el8.8.0+21068+0ecbc070.3 | 7:4.15-6.module+el8.8.0+21068+0ecbc070.3 |
squid-debugsourceRed Hat:rhel_eus:8.8::appstream From an advisory covering 7 CVEs |
before 7:4.15-6.module+el8.8.0+21068+0ecbc070.3 | 7:4.15-6.module+el8.8.0+21068+0ecbc070.3 |
libecapRed Hat:rhel_eus:8.6::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_eus:8.6::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_eus:8.6::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_eus:8.6::appstream From an advisory covering 7 CVEs |
before 7:4.15-3.module+el8.6.0+21069+a1561e3d.4 | 7:4.15-3.module+el8.6.0+21069+a1561e3d.4 |
squid-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 7 CVEs |
before 7:4.15-3.module+el8.6.0+21069+a1561e3d.4 | 7:4.15-3.module+el8.6.0+21069+a1561e3d.4 |
squid-debugsourceRed Hat:rhel_eus:8.6::appstream From an advisory covering 7 CVEs |
before 7:4.15-3.module+el8.6.0+21069+a1561e3d.4 | 7:4.15-3.module+el8.6.0+21069+a1561e3d.4 |
libecapRed Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
squid-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
squid-debugsourceRed Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
libecapRed Hat:rhel_e4s:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_e4s:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_e4s:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_e4s:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_e4s:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
squid-debuginfoRed Hat:rhel_e4s:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
squid-debugsourceRed Hat:rhel_e4s:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
libecapRed Hat:rhel_tus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_tus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_tus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_tus:8.2::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_tus:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
squid-debuginfoRed Hat:rhel_tus:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
squid-debugsourceRed Hat:rhel_tus:8.2::appstream From an advisory covering 7 CVEs |
before 7:4.4-8.module+el8.2.0+21173+22259b09.7 | 7:4.4-8.module+el8.2.0+21173+22259b09.7 |
libecapRed Hat:rhel_aus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_aus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_aus:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
squid-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
squid-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
libecapRed Hat:rhel_e4s:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_e4s:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_e4s:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_e4s:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
squid-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
squid-debugsourceRed Hat:rhel_e4s:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
libecapRed Hat:rhel_tus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-debugsourceRed Hat:rhel_tus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
libecap-develRed Hat:rhel_tus:8.4::appstream From an advisory covering 7 CVEs |
before 0:1.0.1-2.module+el8.1.0+4044+36416a77 | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
squidRed Hat:rhel_tus:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
squid-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
squid-debugsourceRed Hat:rhel_tus:8.4::appstream From an advisory covering 7 CVEs |
before 7:4.11-4.module+el8.4.0+21174+3894a031.6 | 7:4.11-4.module+el8.4.0+21174+3894a031.6 |
squidRed Hat:rhel_eus:9.0::appstream From an advisory covering 7 CVEs |
before 7:5.2-1.el9_0.4 | 7:5.2-1.el9_0.4 |
squid-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 7 CVEs |
before 7:5.2-1.el9_0.4 | 7:5.2-1.el9_0.4 |
squid-debugsourceRed Hat:rhel_eus:9.0::appstream From an advisory covering 7 CVEs |
before 7:5.2-1.el9_0.4 | 7:5.2-1.el9_0.4 |
squidRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
squid-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
squid-migration-scriptRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
squid-sysvinitRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
squidRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
squid-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
squid-migration-scriptRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
squid-sysvinitRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 7:3.5.20-17.el7_9.10 | 7:3.5.20-17.el7_9.10 |
libecapRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0 | 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0 |
squidRocky Linux:8 From an advisory covering 4 CVEs |
before 7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1 | 7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1 |
squidSUSE:Linux Enterprise Module for Server Applications 15 SP4 |
before 5.7-150400.3.15.1 | 5.7-150400.3.15.1 |
squidSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 5.7-150400.3.15.1 | 5.7-150400.3.15.1 |
squidopenSUSE:Leap 15.4 |
before 5.7-150400.3.15.1 | 5.7-150400.3.15.1 |
squidopenSUSE:Leap 15.5 |
before 5.7-150400.3.15.1 | 5.7-150400.3.15.1 |
squidSUSE:Linux Enterprise Server 12 SP5 |
before 4.17-4.33.1 | 4.17-4.33.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 4.17-4.33.1 | 4.17-4.33.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squidSUSE:Enterprise Storage 7.1 |
before 4.17-150000.5.41.1 | 4.17-150000.5.41.1 |
squid3Ubuntu:Pro:16.04:LTS |
before 3.5.12-1ubuntu7.16+esm2, plus listed versions 3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1 Show 16 moreShow less3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm1 |
3.5.12-1ubuntu7.16+esm2 |
squid3Ubuntu:Pro:18.04:LTS |
before 3.5.27-1ubuntu1.14+esm1, plus listed versions 3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2 Show 12 moreShow less3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.14 |
3.5.27-1ubuntu1.14+esm1 |
squidUbuntu:20.04:LTS |
before 4.10-1ubuntu1.8, plus listed versions 4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3 Show 9 moreShow less4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.7 |
4.10-1ubuntu1.8 |
squidUbuntu:22.04:LTS |
before 5.7-0ubuntu0.22.04.2, plus listed versions 4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.15.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.1 |
5.7-0ubuntu0.22.04.2 |
squidUbuntu:20.04:LTS From an advisory covering 5 CVEs |
before 4.10-1ubuntu1.8, plus listed versions 4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3 Show 9 moreShow less4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.7 |
4.10-1ubuntu1.8 |
squidUbuntu:22.04:LTS From an advisory covering 5 CVEs |
before 5.7-0ubuntu0.22.04.2, plus listed versions 4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.15.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.1 |
5.7-0ubuntu0.22.04.2 |
squid3Ubuntu:Pro:16.04:LTS From an advisory covering 2 CVEs |
before 3.5.12-1ubuntu7.16+esm2, plus listed versions 3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1 Show 16 moreShow less3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm1 |
3.5.12-1ubuntu7.16+esm2 |
squid3Ubuntu:Pro:18.04:LTS From an advisory covering 2 CVEs |
before 3.5.27-1ubuntu1.14+esm1, plus listed versions 3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2 Show 12 moreShow less3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.14 |
3.5.27-1ubuntu1.14+esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | ||
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-46728 is a high vulnerability (CVSS 7.5) in Squid-cache Squid, published November 6, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.77%, the 90th percentile. Fixed in squid 3.5.12-1ubuntu7.17+tuxcare.els4.
References
github.com/squid-cache/squid/security/advisories/GHSA-cg5h-v6vc-w33f
github.com/squid-cache/squid/commit/6ea12e8fb590ac6959e9356a81aa3370576568c3
security.netapp.com/advisory/ntap-20231214-0006
lists.fedoraproject.org/archives/list/[email protected]/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC
lists.fedoraproject.org/archives/list/[email protected]/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS
lists.debian.org/debian-lts-announce/2025/09/msg00027.html
Show 96 moreShow less
access.redhat.com/errata/RHSA-2024:0046
access.redhat.com/security/cve/CVE-2023-46724
access.redhat.com/security/cve/CVE-2023-46728
access.redhat.com/security/cve/CVE-2023-49285
access.redhat.com/security/cve/CVE-2023-49286
bugzilla.redhat.com/2247567
bugzilla.redhat.com/2248521
bugzilla.redhat.com/2252923
bugzilla.redhat.com/2252926
errata.almalinux.org/8/ALSA-2024-0046.html
access.redhat.com/errata/RHSA-2024:0071
errata.almalinux.org/9/ALSA-2024-0071.html
nvd.nist.gov/vuln/detail/CVE-2023-46728
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1702420408
errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1702420474
errata.cloudlinux.com/centos8.4-els/CLSA-2023-1702495324.html
errata.cloudlinux.com/centos8.5-els/CLSA-2023-1702495594.html
errata.cloudlinux.com/ol6/CLSA-2023-1702495796.html
errata.cloudlinux.com/ol6/CLSA-2023-1702495907.html
errata.cloudlinux.com/els6/CLSA-2023-1702496332.html
errata.cloudlinux.com/els6/CLSA-2023-1702496473.html
github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46728.json
security-tracker.debian.org/tracker/CVE-2023-46728
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1794
nvd.nist.gov/vuln/detail/CVE-2023-46724
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2247567
bugzilla.redhat.com/show_bug.cgi?id=2248521
bugzilla.redhat.com/show_bug.cgi?id=2252923
bugzilla.redhat.com/show_bug.cgi?id=2252926
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0046.json
cve.org/CVERecord?id=CVE-2023-46724
squid-cache.org/Versions/v5/SQUID-2023_4.patch
squid-cache.org/Versions/v6/SQUID-2023_4.patch
github.com/squid-cache/squid/commit/b70f864940225dfe69f9f653f948e787f99c3810
github.com/squid-cache/squid/security/advisories/GHSA-73m6-jm96-c6r3
cve.org/CVERecord?id=CVE-2023-46728
megamansec.github.io/Squid-Security-Audit/gopher-nullpointer.html
cve.org/CVERecord?id=CVE-2023-49285
nvd.nist.gov/vuln/detail/CVE-2023-49285
cve.org/CVERecord?id=CVE-2023-49286
nvd.nist.gov/vuln/detail/CVE-2023-49286
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0071.json
access.redhat.com/errata/RHSA-2024:0072
bugzilla.redhat.com/show_bug.cgi?id=2245914
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0072.json
access.redhat.com/security/cve/CVE-2023-5824
cve.org/CVERecord?id=CVE-2023-5824
nvd.nist.gov/vuln/detail/CVE-2023-5824
github.com/squid-cache/squid/security/advisories/GHSA-543m-w2m2-g255
access.redhat.com/security/cve/CVE-2025-54574
bugzilla.redhat.com/show_bug.cgi?id=2386026
cve.org/CVERecord?id=CVE-2025-54574
nvd.nist.gov/vuln/detail/CVE-2025-54574
github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988
github.com/squid-cache/squid/releases/tag/SQUID_6_4
github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3
access.redhat.com/errata/RHSA-2024:0397
bugzilla.redhat.com/show_bug.cgi?id=2254663
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0397.json
access.redhat.com/security/cve/CVE-2023-50269
cve.org/CVERecord?id=CVE-2023-50269
nvd.nist.gov/vuln/detail/CVE-2023-50269
squid-cache.org/Versions/v5/SQUID-2023_10.patch
squid-cache.org/Versions/v6/SQUID-2023_10.patch
github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3
access.redhat.com/errata/RHSA-2024:0771
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0771.json
access.redhat.com/errata/RHSA-2024:0772
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0772.json
access.redhat.com/errata/RHSA-2024:0773
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0773.json
access.redhat.com/errata/RHSA-2024:1153
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1153.json
access.redhat.com/errata/RHSA-2024:1787
bugzilla.redhat.com/show_bug.cgi?id=2264309
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1787.json
access.redhat.com/security/cve/CVE-2024-25617
cve.org/CVERecord?id=CVE-2024-25617
nvd.nist.gov/vuln/detail/CVE-2024-25617
github.com/squid-cache/squid/security/advisories/GHSA-h5x6-w8mv-xfpr
megamansec.github.io/Squid-Security-Audit/response-memleaks.html
errata.rockylinux.org/RLSA-2024:0046
suse.com/support/update/announcement/2023/suse-su-20234544-1
bugzilla.suse.com/1216926
bugzilla.suse.com/1217274
suse.com/security/cve/CVE-2023-46728
suse.com/support/update/announcement/2023/suse-su-20234545-1
suse.com/support/update/announcement/2023/suse-su-20234589-1
ubuntu.com/security/CVE-2023-46728
ubuntu.com/security/notices/USN-6500-1
ubuntu.com/security/notices/USN-6500-2
ubuntu.com/security/CVE-2023-46724
ubuntu.com/security/CVE-2023-46846
ubuntu.com/security/CVE-2023-46847
ubuntu.com/security/CVE-2023-46848