Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-46846

Опубликовано: 03 нояб. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.3

Описание

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

released

6.1-2ubuntu2
esm-infra/focal

not-affected

4.10-1ubuntu1.8
focal

released

4.10-1ubuntu1.8
jammy

released

5.7-0ubuntu0.22.04.2
lunar

released

5.7-1ubuntu3.1
mantic

released

6.1-2ubuntu1.1
noble

released

6.1-2ubuntu2
oracular

released

6.1-2ubuntu2
plucky

released

6.1-2ubuntu2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

needs-triage

esm-infra/focal

DNE

esm-infra/xenial

needs-triage

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

EPSS

Процентиль: 92%
0.08411
Низкий

9.3 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.3
redhat
больше 1 года назад

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

CVSS3: 9.3
nvd
больше 1 года назад

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

CVSS3: 9.3
debian
больше 1 года назад

SQUID is vulnerable to HTTP request smuggling, caused by chunked decod ...

oracle-oval
4 месяца назад

ELSA-2024-11049: squid security update (IMPORTANT)

CVSS3: 5.3
fstec
больше 1 года назад

Уязвимость декодера chunked прокси-сервера Squid, позволяющая нарушителю взаимодействовать с сервером напрямую

EPSS

Процентиль: 92%
0.08411
Низкий

9.3 Critical

CVSS3

Уязвимость CVE-2023-46846