Logo
vulnerabilityCVE-2023-46847
Name
CVE-2023-46847
Source
NVD ( link)Debian ( link)
Description
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
squid
Exploitable

Vulnerability Ratings#


8.6
CVSSv31
7.5
CVSSv31

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
6.14
Not Affected
buildroot
master
7.6
Not Affected
openwrt
master
7.1-r1
Not Affected
openwrt
openwrt-25.12
7.1-r1
Not Affected
yocto
master
7.5
Not Affected
yocto
scarthgap
6.14
Not Affected