CVE-2023-46847

8.6

HIGHCVSS v3

Published

November 3, 2023

Affected

7 projects

Assigned by

Red Hat

Severity scale

010

Description

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

squid-cache/squid

GitHubSquid Web Proxy Cache - Source Code

>= 3.2.0.1, < 6.4NVD

squid

NPMProvides SQL tagged template strings and a schema definition function.

>= 3.2.0.1, < 6.4NVD

squid

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

A RISC-V emulator with AOT compilation for fuzzing

>= 3.2.0.1, < 6.4NVD

squid

RubyGemsSquid expands Prawn providing method to easily draw graphs in PDF files.

>= 3.2.0.1, < 6.4NVD

andywer/squid

GitHub🦑 Provides SQL tagged template strings and schema definition functions.

>= 3.2.0.1, < 6.4NVD

nullscreen/squid

GitHubA Ruby library to plot charts in PDF files

>= 3.2.0.1, < 6.4NVD

claudiob/squid

GitHubA Ruby library to plot charts in PDF files

>= 3.2.0.1, < 6.4NVD

Security Advisories

CVE-2023-46847

Description

More on this CVE