8.6
High
CVE-2023-46847 Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to…
Description
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118) | Versions not published | |
| Red Hat Enterprise Linux 7.7 Advanced Update Support | Versions not published | |
| Red Hat Enterprise Linux 8 8090020231030224841 | earliest → < 8090020231030224841.a75119d5 | 8090020231030224841.a75119d5 |
| Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions 8010020231101141358 | earliest → < 8010020231101141358.c27ad7f8 | 8010020231101141358.c27ad7f8 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020231101135052.4 | earliest → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service 8020020231101135052.4 | earliest → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions 8020020231101135052.4 | earliest → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020231101101624.522 | earliest → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service 8040020231101101624.522 | earliest → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 8040020231101101624.522 | earliest → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
| Red Hat Enterprise Linux 8.6 Extended Update Support 8060020231031165747 | earliest → < 8060020231031165747.ad008a3a | 8060020231031165747.ad008a3a |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 7.6 Advanced Update Support | Versions not published |
References
- RHSA-2023:6266 access.redhat.com
- RHSA-2023:6267 access.redhat.com
- RHSA-2023:6268 access.redhat.com
- RHSA-2023:6748 access.redhat.com
- RHSA-2023:6801 access.redhat.com
- RHSA-2023:6803 access.redhat.com
- RHSA-2023:6804 access.redhat.com
- RHSA-2023:6805 access.redhat.com
- RHSA-2023:6810 access.redhat.com
- RHSA-2023:6882 access.redhat.com
- RHSA-2023:6884 access.redhat.com
- RHSA-2023:7213 access.redhat.com
- RHSA-2023:7576 access.redhat.com
- RHSA-2023:7578 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2245916 bugzilla.redhat.com
- github.com github.com
Timeline
- Published
- Last modified