NetSight
IP …
critical9.3

CVE-2023-46846

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall…

Impact

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

Affected products

VendorProductAffected versions
Squid-CacheSquid
from 2.6 before 6.4
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Arm 64
Version 8.0_aarch64
RedhatEnterprise Linux For Ibm Z Systems
Version 8.0_s390x
RedhatEnterprise Linux For Power Little Endian
Version 8.0_ppc64le
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6, 9.2
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6, 8.8, 9.2

Weakness classification

CWE-444

References