{"id":"CVE-2023-46847","state":"PUBLISHED","title":"Squid: denial of service in http digest authentication","description":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","publishedAt":"2023-11-03T07:58:05.641Z","updatedAt":"2026-08-07T01:10:11.444Z","severity":{"score":8.6,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","source":"redhat"},"assigner":"redhat","products":["squid","Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support","Red Hat Red Hat Enterprise Linux 7","Red Hat Red Hat Enterprise Linux 7.6 Advanced Update Support","Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support","Red Hat Red Hat Enterprise Linux 8","Red Hat Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support","Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service","Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service","Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support","Red Hat Red Hat Enterprise Linux 9","Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support"],"affected":[{"packageName":"squid","defaultStatus":"unaffected","versions":[{"version":"3.2.0.1","status":"affected","lessThan":"6.4","versionType":"custom"}],"collectionURL":"https://github.com/squid-cache/squid"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","packageName":"squid34","defaultStatus":"affected","versions":[{"version":"7:3.4.14-15.el6_10.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.1.23-24.el6_10.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.5.20-17.el7_9.9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::server","cpe:/o:redhat:enterprise_linux:7::workstation"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7.6 Advanced Update Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.5.20-12.el7_6.2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:7.6::server"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7.7 Advanced Update Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.5.20-13.el7_7.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:7.7::server"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8080020231030214932.63b34585","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8090020231030224841.a75119d5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8010020231101141358.c27ad7f8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.1::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8020020231101135052.4cda2c84","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream","cpe:/a:redhat:rhel_e4s:8.2::appstream","cpe:/a:redhat:rhel_tus:8.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8020020231101135052.4cda2c84","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream","cpe:/a:redhat:rhel_e4s:8.2::appstream","cpe:/a:redhat:rhel_tus:8.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8020020231101135052.4cda2c84","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream","cpe:/a:redhat:rhel_e4s:8.2::appstream","cpe:/a:redhat:rhel_tus:8.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8040020231101101624.522a0ee4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8040020231101101624.522a0ee4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8040020231101101624.522a0ee4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8060020231031165747.ad008a3a","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.6::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:5.5-5.el9_2.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:5.5-6.el9_3.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:5.2-1.el9_0.3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.0::appstream"]}],"references":["https://access.redhat.com/errata/RHSA-2023:6266","https://access.redhat.com/errata/RHSA-2023:6267","https://access.redhat.com/errata/RHSA-2023:6268","https://access.redhat.com/errata/RHSA-2023:6748","https://access.redhat.com/errata/RHSA-2023:6801","https://access.redhat.com/errata/RHSA-2023:6803","https://access.redhat.com/errata/RHSA-2023:6804","https://access.redhat.com/errata/RHSA-2023:6805","https://access.redhat.com/errata/RHSA-2023:6810","https://access.redhat.com/errata/RHSA-2023:6882","https://access.redhat.com/errata/RHSA-2023:6884","https://access.redhat.com/errata/RHSA-2023:7213","https://access.redhat.com/errata/RHSA-2023:7576","https://access.redhat.com/errata/RHSA-2023:7578","https://access.redhat.com/security/cve/CVE-2023-46847","https://bugzilla.redhat.com/show_bug.cgi?id=2245916","https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g","https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html","https://security.netapp.com/advisory/ntap-20231130-0002/"],"weaknesses":["CWE-120"],"ingestedAt":"2026-10-29T20:06:24.729Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/46xxx/CVE-2023-46847.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-46847","state":"PUBLISHED","datePublished":"2023-11-03T07:58:05.641Z","dateUpdated":"2026-08-07T01:10:11.444Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2023-10-27T08:36:38.158Z"},"containers":{"cna":{"title":"Squid: denial of service in http digest authentication","descriptions":[{"lang":"en","value":"Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication."}],"affected":[{"packageName":"squid","defaultStatus":"unaffected","versions":[{"version":"3.2.0.1","status":"affected","lessThan":"6.4","versionType":"custom"}],"collectionURL":"https://github.com/squid-cache/squid"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","packageName":"squid34","defaultStatus":"affected","versions":[{"version":"7:3.4.14-15.el6_10.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.1.23-24.el6_10.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.5.20-17.el7_9.9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7::server","cpe:/o:redhat:enterprise_linux:7::workstation"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7.6 Advanced Update Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.5.20-12.el7_6.2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:7.6::server"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7.7 Advanced Update Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:3.5.20-13.el7_7.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_aus:7.7::server"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8080020231030214932.63b34585","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8090020231030224841.a75119d5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8010020231101141358.c27ad7f8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.1::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8020020231101135052.4cda2c84","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream","cpe:/a:redhat:rhel_e4s:8.2::appstream","cpe:/a:redhat:rhel_tus:8.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Telecommunications Update Service","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8020020231101135052.4cda2c84","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream","cpe:/a:redhat:rhel_e4s:8.2::appstream","cpe:/a:redhat:rhel_tus:8.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8020020231101135052.4cda2c84","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream","cpe:/a:redhat:rhel_e4s:8.2::appstream","cpe:/a:redhat:rhel_tus:8.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8040020231101101624.522a0ee4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Telecommunications Update Service","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8040020231101101624.522a0ee4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8040020231101101624.522a0ee4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_e4s:8.4::appstream","cpe:/a:redhat:rhel_tus:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support","packageName":"squid:4","defaultStatus":"affected","versions":[{"version":"8060020231031165747.ad008a3a","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:8.6::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:5.5-5.el9_2.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:5.5-6.el9_3.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Extended Update Support","packageName":"squid","defaultStatus":"affected","versions":[{"version":"7:5.2-1.el9_0.3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.0::appstream"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:6266","name":"RHSA-2023:6266","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6267","name":"RHSA-2023:6267","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6268","name":"RHSA-2023:6268","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6748","name":"RHSA-2023:6748","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6801","name":"RHSA-2023:6801","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6803","name":"RHSA-2023:6803","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6804","name":"RHSA-2023:6804","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6805","name":"RHSA-2023:6805","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6810","name":"RHSA-2023:6810","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6882","name":"RHSA-2023:6882","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6884","name":"RHSA-2023:6884","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7213","name":"RHSA-2023:7213","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7576","name":"RHSA-2023:7576","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7578","name":"RHSA-2023:7578","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46847","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245916","name":"RHBZ#2245916","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g"}],"metrics":[{"other":{"content":{"value":"Critical","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","description":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-08-07T01:10:11.444Z"},"datePublic":"2023-10-19T00:00:00.000Z","x_redhatCweChain":"CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","timeline":[{"lang":"en","time":"2023-10-24T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2023-10-19T00:00:00.000Z","value":"Made public."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2023:6266","name":"RHSA-2023:6266","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6267","name":"RHSA-2023:6267","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6268","name":"RHSA-2023:6268","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6748","name":"RHSA-2023:6748","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6801","name":"RHSA-2023:6801","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6803","name":"RHSA-2023:6803","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6804","name":"RHSA-2023:6804","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6805","name":"RHSA-2023:6805","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6810","name":"RHSA-2023:6810","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6882","name":"RHSA-2023:6882","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6884","name":"RHSA-2023:6884","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7213","name":"RHSA-2023:7213","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7576","name":"RHSA-2023:7576","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7578","name":"RHSA-2023:7578","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46847","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245916","name":"RHBZ#2245916","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231130-0002/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T20:53:21.999Z"}}]}}}