Description

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Remediation

References

CVE-2023-46847

Related Vulnerabilities

Oracle JRE CVE-2014-0463 Vulnerability (CVE-2014-0463)

Squid CVE-2018-1000024 Vulnerability (CVE-2018-1000024)

WebLogic CVE-2021-2214 Vulnerability (CVE-2021-2214)

WordPress 4.4.x Possible SQL Injection Vulnerability (4.4 - 4.4.11)

e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-16388)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-120 CVE-2023-46847