9.3
Critical
CVE-2023-46846 SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…
Description
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 8 8090020231030224841 | earliest → < 8090020231030224841.a75119d5 | 8090020231030224841.a75119d5 |
| Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions 8010020231101141358 | earliest → < 8010020231101141358.c27ad7f8 | 8010020231101141358.c27ad7f8 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020231101135052.4 | earliest → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service 8020020231101135052.4 | earliest → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions 8020020231101135052.4 | earliest → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020231101101624.522 | earliest → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service 8040020231101101624.522 | earliest → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 8040020231101101624.522 | earliest → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8.6 Extended Update Support 8060020231031165747 | earliest → < 8060020231031165747.ad008a3a | 8060020231031165747.ad008a3a |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published |
References
- RHSA-2023:6266 access.redhat.com
- RHSA-2023:6267 access.redhat.com
- RHSA-2023:6268 access.redhat.com
- RHSA-2023:6748 access.redhat.com
- RHSA-2023:6801 access.redhat.com
- RHSA-2023:6803 access.redhat.com
- RHSA-2023:6804 access.redhat.com
- RHSA-2023:6810 access.redhat.com
- RHSA-2023:7213 access.redhat.com
- RHSA-2024:11049 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2245910 bugzilla.redhat.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux 7 Extended Lifecycle Support
The 373 CVEs of Red Hat Enterprise Linux 7 Extended Lifecycle Support →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
8.6
High
CVE-2026-102558
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
8.6
High
CVE-2026-102557
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
8.6
High