Name: CVE-2023-46848: Incorrect Conversion between Numeric Types
Creator: Rapid7
Published: 2023-11-03T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-46848, CWE-681, CVSS 8.6, EPSS 0.10221

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

CVSS Details

CVSS 3.1 Base Score: 8.6
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade squid	Nov 6, 2023	Nov 3, 2023
Alpine Linux	—	Upgrade squid	Mar 26, 2024	Nov 3, 2023
Amazon_linux_2023	—	Upgrade squidUpgrade squid-debuginfoUpgrade squid-debugsource	Feb 17, 2025	Oct 19, 2023
Centos_linux	—	Upgrade squid-debugsourceUpgrade squid-debuginfoUpgrade squid	Nov 3, 2023	Nov 2, 2023
Debian	—	Upgrade squid	Jul 30, 2024	Nov 3, 2023
Oracle_linux	—	Upgrade squid	Nov 3, 2023	Oct 19, 2023
Redhat_linux	—	Upgrade squid-debugsourceUpgrade squid-debuginfoUpgrade squid	Nov 3, 2023	Nov 2, 2023
Rocky_linux	—	Upgrade squidUpgrade squid-debuginfoUpgrade squid-debugsource	Mar 5, 2024	Nov 3, 2023
Suse	—	Upgrade squid	Nov 7, 2023	Nov 3, 2023
Ubuntu	—	Upgrade squid	Nov 23, 2023	Nov 3, 2023
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Nov 3, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence