CVE-2023-46846

Description

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

References

https://security.netapp.com/advisory/ntap-20231130-0002/

https://lists.debian.org/debian-lts-announce/2024/01/msg00008.html

https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html

https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh

https://bugzilla.redhat.com/show_bug.cgi?id=2245910

https://access.redhat.com/security/cve/CVE-2023-46846

https://access.redhat.com/errata/RHSA-2024:11049

https://access.redhat.com/errata/RHSA-2023:7213

https://access.redhat.com/errata/RHSA-2023:6810

https://access.redhat.com/errata/RHSA-2023:6804

https://access.redhat.com/errata/RHSA-2023:6803

https://access.redhat.com/errata/RHSA-2023:6801

https://access.redhat.com/errata/RHSA-2023:6748

https://access.redhat.com/errata/RHSA-2023:6268

https://access.redhat.com/errata/RHSA-2023:6267

https://access.redhat.com/errata/RHSA-2023:6266

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3