CVE-2023-46848

HIGH

Squid - DoS

Title source: llm

Description

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

References (7)

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2023:6266

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2023:6268

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2023:6748

[Third Party Advisory] https://access.redhat.com/security/cve/CVE-2023-46848

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=2245919

[Vendor Advisory] https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w

[Vendor Advisory] https://security.netapp.com/advisory/ntap-20231214-0005/

Scores

CVSS v3 8.6

EPSS 0.1042

EPSS Percentile 93.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Classification

CWE

CWE-681

Status published

Affected Products (5)

squid-cache/squid < 6.4

redhat/enterprise_linux

redhat/enterprise_linux_eus

redhat/enterprise_linux_server_aus

redhat/enterprise_linux_server_tus

Timeline

Published Nov 03, 2023

Tracked Since Feb 18, 2026