CVE Catalog
CVE-2023-46847
HighCVSS 8.6Exploitation Probability (EPSS)
Very high risk88.35%
100th percentile - higher than 100% of all known CVEs
Summary
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Risk Assessment
Risk of service disruption and potential memory corruption.
Recommendation
Update Squid to the latest version and consider disabling Digest authentication if not required.
Original NVD description (English source)
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.