CVE-2023-46848
Fixed in a distro release EPSS 11%CVSS 8.6
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | squid | 7:5.5-5.el9_2.1 |
| AlmaLinux 9 | squid | 7:5.5-6.el9_3.1 |
| Alpine 3.19 | squid | 6.4-r0 |
| Alpine 3.20 | squid | 6.4-r0 |
| Alpine 3.21 | squid | 6.4-r0 |
| Alpine 3.22 | squid | 6.4-r0 |
| Alpine 3.23 | squid | 6.4-r0 |
| Alpine 3.24 | squid | 6.4-r0 |
| Amazon Linux 2023 | squid | 7:5.8-1.amzn2023.0.2 |
| Debian 12 | squid | 5.7-2+deb12u1 |
| Debian 13 | squid | 6.5-1 |
| Debian 14 | squid | 6.5-1 |
| Red Hat Enterprise Linux 9 | squid | 7:5.5-6.el9_3.1 |
| Red Hat Enterprise Linux 9 | squid | 7:5.5-5.el9_2.1 |
| Red Hat Enterprise Linux 9 | squid-debuginfo | 7:5.5-6.el9_3.1 |
| Red Hat Enterprise Linux 9 | squid-debuginfo | 7:5.5-5.el9_2.1 |
| Red Hat Enterprise Linux 9 | squid-debugsource | 7:5.5-6.el9_3.1 |
| Red Hat Enterprise Linux 9 | squid-debugsource | 7:5.5-5.el9_2.1 |
| Red Hat rhel eus 9.0 | squid | 7:5.2-1.el9_0.3 |
| Red Hat rhel eus 9.0 | squid-debuginfo | 7:5.2-1.el9_0.3 |
| Red Hat rhel eus 9.0 | squid-debugsource | 7:5.2-1.el9_0.3 |
| Rocky Linux 9 | squid | 7:5.5-5.el9_2.1 |
| SUSE Enterprise Storage 7.1 | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP4 | squid | 5.7-150400.3.12.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP5 | squid | 5.7-150400.3.12.1 |
| SUSE Linux Enterprise Server 12 SP5 | squid | 4.17-4.30.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | squid | 4.17-4.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | squid | 4.17-150000.5.38.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | squid | 4.17-150000.5.38.1 |
| Ubuntu 20.04 LTS | squid | 4.10-1ubuntu1.8 |
| Ubuntu 22.04 LTS | squid | 5.7-0ubuntu0.22.04.2 |
| openSUSE Leap 15.4 | squid | 5.7-150400.3.12.1 |
| openSUSE Leap 15.5 | squid | 5.7-150400.3.12.1 |
| openSUSE Tumbleweed | squid | 6.4-1.1 |