{"id":"CVE-2023-46847","published":"2023-11-03T07:58:05Z","modified":"2026-08-07T01:10:11Z","title":"Squid: denial of service in http digest authentication","vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","tier":"core","eol":null,"affectedVersions":[{"vendor":null,"product":null,"versions":[">= 3.2.0.1, < 6.4"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7.6 Advanced Update Support","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7.7 Advanced Update Support","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions","versions":["all versions"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","versions":["all versions"]}],"description":{"text":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","provenance":"source","from":"CVE.org"},"summary":{"text":"The Squid proxy component shipped with Red Hat Enterprise Linux 6 Extended Lifecycle Support contains a buffer overflow in its HTTP Digest Authentication handling, where input is copied without checking its size. A remote attacker with no privileges and no user interaction can exploit it by sending up to 2 MB of arbitrary data to heap memory, but only when Squid is configured to accept HTTP Digest Authentication.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:56Z"},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.78513,"percentile":0.99583,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":3,"pulses":[{"name":"Red Hat                     (Pulse by bd.taylor)","url":"https://otx.alienvault.com/pulse/656aa8c5c66c18c331175380","created":"2023-12-02"},{"name":"Red Hat                     (Pulse by bd.taylor)","url":"https://otx.alienvault.com/pulse/656aa8c5d33779be8d0def31","created":"2023-12-02"},{"name":"Red Hat","url":"https://otx.alienvault.com/pulse/656a57614a5b7900d3a54ea3","created":"2023-12-01"}],"provenance":"machine"},"cwes":[{"id":"CWE-120","name":"Buffer Copy without Checking Size of Input"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:6266","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6267","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6268","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6748","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6801","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6803","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6804","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6805","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6810","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6882","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6884","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7213","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7576","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7578","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46847","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245916","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g","tags":[]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231130-0002/","tags":["x_transferred"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-51013","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-51013","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-11-03","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-46847","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":27.3,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.92,"detail":"percentile 0.9958"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":6.02,"detail":"base score 8.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}