Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-46847

Опубликовано: 19 окт. 2023
Источник: redhat
CVSS3: 8.6

Описание

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Дополнительная информация

Статус:

Critical
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=2245916squid: Denial of Service in HTTP Digest Authentication

8.6 High

CVSS3

Связанные уязвимости

CVSS3: 8.6
ubuntu
больше 1 года назад

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

CVSS3: 8.6
nvd
больше 1 года назад

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

CVSS3: 8.6
debian
больше 1 года назад

Squid is vulnerable to a Denial of Service, where a remote attacker c ...

oracle-oval
больше 1 года назад

ELSA-2023-6884: squid security update (CRITICAL)

oracle-oval
больше 1 года назад

ELSA-2023-6882: squid34 security update (CRITICAL)

8.6 High

CVSS3