Read the docs
TI-2023-25306 Aliases CVE-2023-46847

Squid: denial of service in http digest authentication

Priority HIGH 77CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Why it matters now

EPSS 0.78513 99th percentileScored 2026-11-07
Fix Fixed squid: 6.4Red Hat: 14 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—squid3.2.0.1 to before 6.46.4Patch availableCNA
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support—7:3.4.14-15.el6_10.1Patch availableCNA
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support—7:3.1.23-24.el6_10.1Patch availableCNA
Red HatRed Hat Enterprise Linux 7—7:3.5.20-17.el7_9.9Patch availableCNA
Red HatRed Hat Enterprise Linux 7.6 Advanced Update Support—7:3.5.20-12.el7_6.2Patch availableCNA
Red HatRed Hat Enterprise Linux 7.7 Advanced Update Support—7:3.5.20-13.el7_7.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8—8080020231030214932.63b34585Patch availableCNA
Red HatRed Hat Enterprise Linux 8—8090020231030224841.a75119d5Patch availableCNA
Red HatRed Hat Enterprise Linux 8.1 Update Services for SAP Solutions—8010020231101141358.c27ad7f8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—8020020231101135052.4cda2c84Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service—8020020231101135052.4cda2c84Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions—8020020231101135052.4cda2c84Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—8040020231101101624.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—8040020231101101624.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—8040020231101101624.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—8060020231031165747.ad008a3aPatch availableCNA
Red HatRed Hat Enterprise Linux 9—7:5.5-5.el9_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9—7:5.5-6.el9_3.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—7:5.2-1.el9_0.3Patch availableCNA
  • squid Vendor— Affected 3.2.0.1 to before 6.4 Fixed in 6.4 Patch available CNA
  • Red Hat Enterprise Linux 6 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 7:3.4.14-15.el6_10.1 Patch available CNA
  • Red Hat Enterprise Linux 6 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 7:3.1.23-24.el6_10.1 Patch available CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 7:3.5.20-17.el7_9.9 Patch available CNA
  • Red Hat Enterprise Linux 7.6 Advanced Update Support VendorRed Hat Affected — Fixed in 7:3.5.20-12.el7_6.2 Patch available CNA
  • Red Hat Enterprise Linux 7.7 Advanced Update Support VendorRed Hat Affected — Fixed in 7:3.5.20-13.el7_7.1 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8080020231030214932.63b34585 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8090020231030224841.a75119d5 Patch available CNA
  • Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8010020231101141358.c27ad7f8 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 8020020231101135052.4cda2c84 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8020020231101135052.4cda2c84 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8020020231101135052.4cda2c84 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 8040020231101101624.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8040020231101101624.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8040020231101101624.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 8060020231031165747.ad008a3a Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 7:5.5-5.el9_2.1 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 7:5.5-6.el9_3.1 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 7:5.2-1.el9_0.3 Patch available CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*3.2.0.1 to before 6.4Vulnerablesquid-cache
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*8.0_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*8.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*8.0_ppc64leVulnerableRed Hat
  • cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:* Versions 3.2.0.1 to before 6.4 Vulnerable ·squid-cache
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:* Versions 8.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat

Remediation

  • Fix · CNA squid Fixed in 6.4

Red Hat 14 advisories

  • RHSA-2023:7578 Released 2023-11-29 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux Server AUS (v. 7.6) squid-7:3.5.20-12.el7_6.2, squid-migration-script-7:3.5.20-12.el7_6.2
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.6) squid-sysvinit-7:3.5.20-12.el7_6.2
  • RHSA-2023:7576 Released 2023-11-29 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) squid-7:3.5.20-13.el7_7.1, squid-migration-script-7:3.5.20-13.el7_7.1
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) squid-sysvinit-7:3.5.20-13.el7_7.1
  • RHSA-2023:7213 Released 2023-11-14 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4, libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4, libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4 +11
Show 11 more Red Hat advisories
  • RHSA-2023:6884 Released 2023-11-13 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux Server (v. 6 ELS) squid-7:3.1.23-24.el6_10.1
  • RHSA-2023:6882 Released 2023-11-13 · Red Hat rating Critical
    squid34 security update
    • Red Hat Enterprise Linux Server (v. 6 ELS) squid34-7:3.4.14-15.el6_10.1
  • RHSA-2023:6810 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +5
  • RHSA-2023:6805 Released 2023-11-08 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux Server (v. 7) squid-7:3.5.20-17.el7_9.9, squid-migration-script-7:3.5.20-17.el7_9.9
    • Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.9
    • Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.5.20-17.el7_9.9, squid-migration-script-7:3.5.20-17.el7_9.9
    • Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.9
  • RHSA-2023:6804 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
  • RHSA-2023:6801 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
  • RHSA-2023:6803 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +5
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
  • RHSA-2023:6748 Released 2023-11-07 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux AppStream (v. 9) squid-7:5.5-6.el9_3.1
  • RHSA-2023:6267 Released 2023-11-02 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
  • RHSA-2023:6268 Released 2023-11-02 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) squid-7:5.2-1.el9_0.3
  • RHSA-2023:6266 Released 2023-11-02 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux AppStream (v. 9) squid-7:5.5-5.el9_2.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and 10 more products — RHSA-2023:6266

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    • TI-2023-25307 Squid: denial of service in ftpPriority MEDIUM 51
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and 10 more products — RHSA-2023:6268

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    • TI-2023-25307 Squid: denial of service in ftpPriority MEDIUM 51
    Show all 3 records → Advisory →
Show 7 more groups
  • Advisory ·

    Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and 10 more products — RHSA-2023:6748

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    • TI-2023-25307 Squid: denial of service in ftpPriority MEDIUM 51
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6267

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6801

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6803

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6804

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6810

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:7213

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25305 Squid: request/response smuggling in http/1.1 and icapPriority MEDIUM 56
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:6267, RHSA-2023:7213
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:6266, RHSA-2023:6748
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2023:6803
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:6804
Red Hat Enterprise Linux AppStream E4S (v. 8.1)Fixed RHSA-2023:6810
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2023:6803
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:6804
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:6801
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:6268
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2023:6803
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:6804
Red Hat Enterprise Linux Server (v. 6 ELS)Fixed RHSA-2023:6882, RHSA-2023:6884
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2023:6805
Red Hat Enterprise Linux Server AUS (v. 7.6)Fixed RHSA-2023:7578
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2023:7576
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2023:6805
Red Hat Enterprise Linux Server Optional AUS (v. 7.6)Fixed RHSA-2023:7578
Red Hat Enterprise Linux Server Optional AUS (v. 7.7)Fixed RHSA-2023:7576
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2023:6805
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2023:6805

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-46847

References

Advisory 17

  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
See all 1955 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences