CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-46846

CVSS 9.3v3.1pub. 2023-11-03upd. 2024-12-18

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

  • Red Hat Enterprise Linux

    OS
    Redhat
    8.09.0

  • Red Hat Enterprise Linux Eus

    OS
    Redhat
    8.68.89.09.2

  • Red Hat Enterprise Linux For Arm 64

    OS
    Redhat
    8.0_aarch64

  • Red Hat Enterprise Linux For IBM Z Systems

    OS
    Redhat
    8.0_s390x

  • Red Hat Enterprise Linux For Power Little Endian

    OS
    Redhat
    8.0_ppc64le

  • Red Hat Enterprise Linux Server Aus

    OS
    Redhat
    8.28.48.69.2

  • Red Hat Enterprise Linux Server Tus

    OS
    Redhat
    8.28.48.68.89.2

  • Squid Cache Squid

    APP
    Squid-Cache
    2.6 – 6.4 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Firewall
CWE
References

Related vulnerabilities

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product

SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego

CVE-2019-5544CRITICAL9.8⚠ KEVPL ✓same product

Krytyczny heap overwrite w OpenSLP dla VMware ESXi i Horizon DaaS

CVE-2018-14667CRITICAL9.8⚠ KEVPL ✓same product

RCE przez EL injection w RichFaces Framework 3.X — brak uwierzytelnienia

CVE-2016-3427CRITICAL9.8⚠ KEVPL ✓same product

Krytyczna podatność RCE w Oracle Java SE i JRockit — komponent JMX