9.3
Critique
CVE-2023-46846 SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…
Description
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions non publiées | |
| Red Hat Enterprise Linux 8 8090020231030224841 | premières → < 8090020231030224841.a75119d5 | 8090020231030224841.a75119d5 |
| Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions 8010020231101141358 | premières → < 8010020231101141358.c27ad7f8 | 8010020231101141358.c27ad7f8 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020231101135052.4 | premières → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service 8020020231101135052.4 | premières → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions 8020020231101135052.4 | premières → < 8020020231101135052.4cda2c84 | 8020020231101135052.4cda2c84 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020231101101624.522 | premières → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service 8040020231101101624.522 | premières → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 8040020231101101624.522 | premières → < 8040020231101101624.522a0ee4 | 8040020231101101624.522a0ee4 |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 8.6 Extended Update Support 8060020231031165747 | premières → < 8060020231031165747.ad008a3a | 8060020231031165747.ad008a3a |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Enterprise Linux 9.0 Extended Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 6 | Versions non publiées |
Références
- RHSA-2023:6266 access.redhat.com
- RHSA-2023:6267 access.redhat.com
- RHSA-2023:6268 access.redhat.com
- RHSA-2023:6748 access.redhat.com
- RHSA-2023:6801 access.redhat.com
- RHSA-2023:6803 access.redhat.com
- RHSA-2023:6804 access.redhat.com
- RHSA-2023:6810 access.redhat.com
- RHSA-2023:7213 access.redhat.com
- RHSA-2024:11049 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2245910 bugzilla.redhat.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux 7 Extended Lifecycle Support
Les 373 CVE de Red Hat Enterprise Linux 7 Extended Lifecycle Support →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
8.6
Élevée
CVE-2026-102558
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
8.6
Élevée
CVE-2026-102557
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
8.6
Élevée