CVE-2023-46848

HIGH 7.5CVE-2023-46848 · Published 03/11/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
squid squid-cache	`≥ 5.0.3, < 6.4`	`6.4`

Description

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

References

access.redhat.com/errata/RHSA-2023:6266 · Third Party Advisory
access.redhat.com/errata/RHSA-2023:6268 · Third Party Advisory
access.redhat.com/errata/RHSA-2023:6748 · Third Party Advisory
access.redhat.com/security/cve/CVE-2023-46848 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
squid-cache/squid security advisory · Vendor Advisory
security.netapp.com/advisory/ntap-20231214-0005

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free