CVE-2023-46847

High

Open

TLP:CLEAR

Squid: denial of service in http digest authentication

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Details

CVSS Score: 8.6
EPSS Score ⓘ: 88.35%

99.8th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Confidence: 90%
Published: Nov 3, 2023
Last Modified: Aug 7, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.