{"id":"CVE-2023-46847","aliases":["ALPINE-CVE-2023-46847","ALSA-2023:6266","ALSA-2023:6267","ALSA-2023:6748","ALSA-2023:7213","AZL-31902","AZL-63103","CLSA-2023-1700160647","CLSA-2023-1700161185","CLSA-2023-1700161280","CLSA-2023-1700164396","CLSA-2023-1700164647","CLSA-2023-1700211046","CLSA-2023-1701284898","CLSA-2023-1701286463","DEBIAN-CVE-2023-46847","DLA-3709-1","DSA-5637-1","EUVD-2023-51013","GHSA-phqj-m8gv-cq4g","MGASA-2023-0315","OESA-2023-1776","RHSA-2023:6266","RHSA-2023:6267","RHSA-2023:6268","RHSA-2023:6748","RHSA-2023:6801","RHSA-2023:6803","RHSA-2023:6804","RHSA-2023:6805","RHSA-2023:6810","RHSA-2023:6882","RHSA-2023:6884","RHSA-2023:7213","RHSA-2023:7576","RHSA-2023:7578","RLSA-2023:6266","RLSA-2023:6267","RLSA-2023:7213","ROOT-OS-ALPINE-318-CVE-2023-46847","SUSE-SU-2023:4380-1","SUSE-SU-2023:4381-1","SUSE-SU-2023:4384-1","UBUNTU-CVE-2023-46847","USN-6500-1","USN-6500-2","openSUSE-SU-2024:13398-1"],"status":"published","title":"Squid: denial of service in http digest authentication","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.78513,"percentile":0.99589,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-11-02T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"squid","fixed_in":["6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"squid","fixed_in":["6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"squid","fixed_in":["6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"squid","fixed_in":["6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"squid","fixed_in":["6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"squid","fixed_in":["6.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"squid","fixed_in":["6.4-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"squid","fixed_in":["5.7-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["6.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["6.5-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-debuginfo","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-migration-script","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-sysvinit","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-debuginfo","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-migration-script","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-sysvinit","fixed_in":["7:3.5.20-17.el7_9.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"squid34","fixed_in":["7:3.4.14-15.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"squid34-debuginfo","fixed_in":["7:3.4.14-15.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"squid","fixed_in":["7:3.1.23-24.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"squid-debuginfo","fixed_in":["7:3.1.23-24.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid","fixed_in":["7:3.5.20-13.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid-debuginfo","fixed_in":["7:3.5.20-13.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid-migration-script","fixed_in":["7:3.5.20-13.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid-sysvinit","fixed_in":["7:3.5.20-13.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid","fixed_in":["7:3.5.20-12.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid-debuginfo","fixed_in":["7:3.5.20-12.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid-migration-script","fixed_in":["7:3.5.20-12.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid-sysvinit","fixed_in":["7:3.5.20-12.el7_6.2"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"squid","fixed_in":["5.9-r00071","5.9-r00074","5.9-r00073","5.9-r00072","5.9-r00075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-squid","fixed_in":["5.9-r00071","5.9-r00074","5.9-r00073","5.9-r00072","5.9-r00075"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","fixed_in":["3.5.12-1ubuntu7.16+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"squid","fixed_in":["4.10-1ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"squid","fixed_in":["5.7-0ubuntu0.22.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0.1"},{"fixed":"6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0.1"},{"fixed":"6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0.1"},{"fixed":"6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0.1"},{"fixed":"6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0.1"},{"fixed":"6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0.1"},{"fixed":"6.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module_el8.8.0+3670+56cb3c8e.1.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module_el8.9.0+3680+f9142978.1.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-1.module_el8.5.0+2143+24c223d9.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module_el8.4.0+2144+2063f9d1.2.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u1"}]}],"versions":["5.7-2"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u9"}]}],"versions":["4.6-1","4.6-1+deb10u1","4.6-1+deb10u2","4.6-1+deb10u3","4.6-1+deb10u4","4.6-1+deb10u5","4.6-1+deb10u6","4.6-1+deb10u7","4.6-1+deb10u8"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10+deb11u3"}]}],"versions":["4.13-10","4.13-10+deb11u1","4.13-10+deb11u2"],"bundled":8},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u1"}]}],"versions":["5.7-2"],"bundled":8},{"source":"osv","ecosystem":"Mageia:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-1.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-14.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-14.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-18.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-18.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-18.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+20569+26050b0f.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+20569+26050b0f.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+20569+26050b0f.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+20581+c33b42aa.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+20581+c33b42aa.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+20581+c33b42aa.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+20588+7f9884cb.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+20587+c1238193.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.1.0+20589+bb91f53c.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.1.0+20589+bb91f53c.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.1.0+20589+bb91f53c.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-15.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"squid34-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-15.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-24.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-24.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+20571+8d39338b.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+20571+8d39338b.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+20571+8d39338b.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-13.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-13.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-13.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-13.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-12.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-12.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-12.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-12.el7_6.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.4.0+404+316a0dc5"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+1273+55f5b063"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-r00071"},{"fixed":"5.9-r00074"},{"fixed":"5.9-r00073"},{"fixed":"5.9-r00072"},{"fixed":"5.9-r00075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-r00071"},{"fixed":"5.9-r00074"},{"fixed":"5.9-r00073"},{"fixed":"5.9-r00072"},{"fixed":"5.9-r00075"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.38.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm2"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm1"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.8"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.2"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.8"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.2"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm2"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm1"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-1.1"}]}],"bundled":5}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 7.6 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 7.7 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.1 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 extended update support"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_arm_64"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:6266","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6267","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6268","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6748","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6801","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6803","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6804","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6805","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6810","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6882","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6884","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7213","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7576","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7578","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46847","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245916","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g","tags":["x_transferred","Vendor Advisory","advisory","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html","tags":["x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231130-0002/","tags":["x_transferred","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-46847","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46846","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46848","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245910","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245916","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245919","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6266.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6267.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6748.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-7213.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46847","tags":["web","advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1700160647","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1700161185","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1700161280.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1700164396.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1700164647.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1700211046.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1701284898.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1701286463.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46847.json","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-46847","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0315.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32486","tags":["report"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh","tags":["advisory","article"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w","tags":["advisory","article"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46846","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245919","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6266.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46846","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46847","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46848","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46848","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6267.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6268.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6748.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6801.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6803.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6804.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6805.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6810.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6882.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6884.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7213.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7576.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7578.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6266","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6267","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:7213","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234380-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216495","tags":["report"]},{"url":"https://bugzilla.suse.com/1216498","tags":["report"]},{"url":"https://bugzilla.suse.com/1216500","tags":["report"]},{"url":"https://bugzilla.suse.com/1216803","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46848","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234381-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234384-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-46847","tags":["report"]},{"url":"https://lists.squid-cache.org/pipermail/squid-announce/2023-October/000154.html","tags":["report"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/digest-overflow.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6500-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6500-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-46724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46848","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5824","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-46847","title":"Squid: denial of service in http digest authentication","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T07:58:05.641Z","modified":"2026-08-07T01:10:11.444Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:23.645864Z"}],"euvd":[{"id":"EUVD-2023-51013","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T07:58:05Z","modified":"2026-08-07T01:10:11Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:07.757838Z"}],"nvd":[{"id":"CVE-2023-46847","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T08:15:08.023Z","modified":"2026-08-07T02:16:30.157Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:41.047232Z"}],"osv":[{"id":"ALPINE-CVE-2023-46847","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T08:15:08.023Z","modified":"2026-10-26T17:17:58.650527865Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-31902","title":"CVE-2023-46847 affecting package squid 5.7-5","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T08:15:08Z","modified":"2026-04-21T04:26:34.517366Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-63103","title":"CVE-2023-46847 affecting package squid for versions less than 6.4-1","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T08:15:08Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"CVE-2023-46847","title":"Squid: denial of service in http digest authentication","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T07:58:05.641Z","modified":"2026-10-28T02:30:56.572131047Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-46847","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T08:15:08.023Z","modified":"2026-10-26T18:02:58.547643154Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2023-1776","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\r\n\r\nDescription: Due to chunked decoder lenience Squid is vulnerable to\nRequest/Response smuggling attacks when parsing HTTP/1.1\nand ICAP messages\r\n\r\nReference: https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh\r\n\r\nAffected versions: 2.6-6.3. Patched in 6.4.(CVE-2023-46846)\r\n\r\nDescription: Due to a buffer overflow bug Squid is vulnerable to a Denial of\nService attack against HTTP Digest Authentication\r\n\r\nReference: https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g\r\n\r\nAffected versions: 3.2.0.1-5.9, 6.0-6.3(CVE-2023-46847)","status":"published","published":"2023-11-03T11:06:13Z","modified":"2026-08-18T01:17:56.355484599Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:6266","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:36:36Z","modified":"2026-08-07T10:10:27Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6267","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T15:36:46Z","modified":"2026-08-07T10:10:27Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6268","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:36:25Z","modified":"2026-08-07T10:10:28Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6748","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:36:55Z","modified":"2026-08-07T10:10:39Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6801","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T15:37:13Z","modified":"2026-08-07T10:10:42Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6803","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T15:37:23Z","modified":"2026-08-07T10:10:42Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6804","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T15:37:34Z","modified":"2026-08-07T10:10:43Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6805","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:37:04Z","modified":"2026-08-07T10:10:43Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6810","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T15:37:43Z","modified":"2026-08-07T10:10:44Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6882","title":"Red Hat Security Advisory: squid34 security update","status":"published","published":"2024-09-16T15:37:52Z","modified":"2026-08-07T10:10:47Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6884","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:36:47Z","modified":"2026-08-07T10:10:48Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7213","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T15:36:55Z","modified":"2026-08-07T10:10:54Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7576","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:37:13Z","modified":"2026-08-07T10:11:19Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7578","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:37:04Z","modified":"2026-08-07T10:11:19Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-46847","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","status":"published","published":"2023-11-03T08:15:00Z","modified":"2026-02-04T03:45:25.911851Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2023:6266","title":"Critical: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)\n* SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)\n* SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-02T00:00:00Z","modified":"2026-10-29T11:30:59.036167289Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6267","title":"Critical: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)\n* SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-02T00:00:00Z","modified":"2026-10-29T11:02:20.00554533Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6748","title":"Critical: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)\n* squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)\n* squid: denial of Service in FTP (CVE-2023-46848)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:34.709142597Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:7213","title":"Critical: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)\n* squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:19.309761296Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2023-1700160647","title":"Fix CVE(s): CVE-2023-46847","description":"\n   * SECURITY UPDATE: Denial of Service in HTTP Digest Authentication\n     - debian/patches/CVE-2023-46847.patch: fix stack buffer overflow\n       when parsing Digest Authorization\n     - CVE-2023-46847","status":"published","published":"2023-11-16T18:50:51Z","modified":"2026-06-04T10:04:07.866835Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1700161185","title":"Fix CVE(s): CVE-2023-46847","description":"\n   * SECURITY UPDATE: denial of service in HTTP Digest Authentication\n     - debian/patches/CVE-2023-46847.patch: fix stack buffer overflow\n       when parsing Digest Authorization\n     - CVE-2023-46847","status":"published","published":"2023-11-16T18:59:49Z","modified":"2026-06-04T10:04:27.037571Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1700161280","title":"squid: Fix of 3 CVEs","description":"- CVE-2023-46846: Improve HTTP chunked encoding compliance\n- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization\n- CVE-2023-46848: Fix userinfo percent-encoding","status":"published","published":"2023-11-16T19:01:24Z","modified":"2026-06-01T00:33:21.983750839Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1700164396","title":"squid: Fix of CVE-2023-46847","description":"- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization","status":"published","published":"2023-11-16T19:53:20Z","modified":"2026-06-01T00:33:02.774460986Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1700164647","title":"squid: Fix of CVE-2023-46847","description":"- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization","status":"published","published":"2023-11-16T19:57:30Z","modified":"2026-06-01T00:33:24.844902629Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1700211046","title":"squid: Fix of 2 CVEs","description":"- CVE-2023-46846: Improve HTTP chunked encoding compliance\n- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization","status":"published","published":"2023-11-17T08:50:50Z","modified":"2026-06-01T00:32:20.276211217Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1701284898","title":"squid34: Fix of CVE-2023-46847","description":"- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization","status":"published","published":"2023-11-29T19:08:21Z","modified":"2026-06-01T00:33:24.936165905Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1701286463","title":"squid34: Fix of CVE-2023-46847","description":"- CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization","status":"published","published":"2023-11-29T19:34:27Z","modified":"2026-06-01T00:32:26.458254892Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DLA-3709-1","title":"squid - security update","status":"published","published":"2024-01-09T00:00:00Z","modified":"2026-03-09T01:23:08.06653Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5637-1","title":"squid - security update","status":"published","published":"2024-03-08T00:00:00Z","modified":"2026-03-09T02:10:03.731725Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0315","title":"Updated squid packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\n\nRequest/Response smuggling in HTTP/1.1 and ICAP. (CVE-2023-46846)\n\nDenial of Service in HTTP Digest Authentication. (CVE-2023-46847)\n\nDenial of Service in FTP. (CVE-2023-46848)\n","status":"published","published":"2023-11-09T23:37:11Z","modified":"2026-04-16T04:43:54.743674165Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13398-1","title":"squid-6.4-1.1 on GA media","description":"These are all security issues fixed in the squid-6.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:14:07.068403Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2023:6266","title":"Critical: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)\n\n* SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)\n\n* SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-11T23:00:06.080015Z","modified":"2026-02-04T08:45:13.817851Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:6267","title":"Critical: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)\n\n* SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-11T22:59:08.669026Z","modified":"2026-02-05T05:30:10.713803Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:7213","title":"Critical: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)\n\n* squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-28T22:43:02.525343Z","modified":"2026-02-04T23:30:03.427802Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2023-46847","title":"CVE-2023-46847 in squid - Patched by Root","description":"Root has patched CVE-2023-46847 in the squid package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:43:34Z","modified":"2026-09-29T11:15:08.614574671Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2023:4380-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500).\n- CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495).\n- CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803).\n- CVE-2023-46848: Denial of Service in FTP (bsc#1216498).\n","status":"published","published":"2023-11-06T15:51:25Z","modified":"2026-02-04T03:55:18.678264Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4381-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500).\n- CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495).\n- CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803).\n- CVE-2023-46848: Denial of Service in FTP (bsc#1216498).\n","status":"published","published":"2023-11-06T15:51:39Z","modified":"2026-02-04T03:39:01.02584Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4384-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500).\n- CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495).\n- CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803).\n- CVE-2023-46848: Denial of Service in FTP (bsc#1216498).\n","status":"published","published":"2023-11-08T10:07:14Z","modified":"2026-02-04T03:43:56.487303Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6500-1","title":"squid vulnerabilities","description":"Joshua Rogers discovered that Squid incorrectly handled validating certain\nSSL certificates. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-46724)\n\nJoshua Rogers discovered that Squid incorrectly handled the Gopher\nprotocol. A remote attacker could possibly use this issue to cause Squid to\ncrash, resulting in a denial of service. Gopher support has been disabled\nin this update. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, and Ubuntu 23.04. (CVE-2023-46728)\n\nKeran Mu and Jianjun Chen discovered that Squid incorrectly handled the\nchunked decoder. A remote attacker could possibly use this issue to perform\nHTTP request smuggling attacks. (CVE-2023-46846)\n\nJoshua Rogers discovered that Squid incorrectly handled HTTP Digest\nAuthentication. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2023-46847)\n\nJoshua Rogers discovered that Squid incorrectly handled certain FTP urls.\nA remote attacker could possibly use this issue to cause Squid to crash,\nresulting in a denial of service. (CVE-2023-46848)\n","status":"published","published":"2023-11-21T15:42:49Z","modified":"2026-04-27T17:02:16.672293142Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6500-2","title":"squid3 vulnerabilities","description":"USN-6500-1 fixed several vulnerabilities in Squid. This update provides\nthe corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Joshua Rogers discovered that Squid incorrectly handled the Gopher\n protocol. A remote attacker could possibly use this issue to cause Squid to\n crash, resulting in a denial of service. Gopher support has been disabled\n in this update. (CVE-2023-46728)\n\n Joshua Rogers discovered that Squid incorrectly handled HTTP Digest\n Authentication. A remote attacker could possibly use this issue to cause\n Squid to crash, resulting in a denial of service. (CVE-2023-46847)\n","status":"published","published":"2023-12-11T11:40:02Z","modified":"2026-06-25T13:31:28.703796343Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}