CVE-2023-46848highCWE-681

CVE-2023-46848: high-severity vulnerability in squid

Squid: denial of service in ftp

Published · Updated

Follow this CVE+ Monitor Red Hat Enterprise Linux+ Monitor Red Hat Enterprise Linux 9.0 Extended Update Support

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

26Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 11%
In short

Squid proxy can be forced to crash or stop responding when someone sends specially crafted FTP requests through HTTP. This allows attackers to disrupt service for all users relying on that proxy.

Technical detail

Squid is vulnerable to DoS via malformed ftp:// URLs processed through HTTP request messages or derived from FTP Native protocol input. The vulnerability allows remote attackers without authentication to trigger resource exhaustion or crash conditions by manipulating URL parsing logic, impacting availability for all downstream clients.

Summary generated and translated by AI from the official description.
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected products
squidRed Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Extended Update Support
Related CVEs — squid

In the same product, most dangerous first.

CVE-2023-4911HIGHGlibc: buffer overflow in ld.so leading to privilege escalationEPSS 63.8%KEVCVE-2024-6387HIGHOpenssh: regresshion - race condition in ssh allows rce/dosEPSS 99.5%CVE-2024-3094CRITICALXz: malicious code in distributed sourceEPSS 90.9%CVE-2023-46847HIGHSquid: denial of service in http digest authenticationEPSS 78.5%CVE-2024-12084CRITICALRsync: heap buffer overflow in rsync due to improper checksum length handlingEPSS 72.5%CVE-2023-1183MEDIUMArbitrary file writeEPSS 64.9%