Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-46847

Опубликовано: 19 окт. 2023
Источник: redhat
CVSS3: 8.6
EPSS Средний

Описание

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Дополнительная информация

Статус:

Critical
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=2245916squid: Denial of Service in HTTP Digest Authentication

EPSS

Процентиль: 97%
0.44737
Средний

8.6 High

CVSS3

Связанные уязвимости

CVSS3: 8.6
ubuntu
около 2 лет назад

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

CVSS3: 8.6
nvd
около 2 лет назад

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

CVSS3: 8.6
msrc
2 месяца назад

Squid: denial of service in http digest authentication

CVSS3: 8.6
debian
около 2 лет назад

Squid is vulnerable to a Denial of Service, where a remote attacker c ...

oracle-oval
почти 2 года назад

ELSA-2023-6884: squid security update (CRITICAL)

EPSS

Процентиль: 97%
0.44737
Средний

8.6 High

CVSS3