NetSight
IP …
high8.6

CVE-2023-46847

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory w…

Impact

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Affected products

VendorProductAffected versions
Squid-CacheSquid
from 3.2.0.1 before 6.4
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Arm 64
Version 8.0_aarch64
RedhatEnterprise Linux For Ibm Z Systems
Version 8.0_s390x
RedhatEnterprise Linux For Power Little Endian
Version 8.0_ppc64le
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6, 9.2
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6, 8.8, 9.2
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-120

References