Nixpkgs security tracker

Untriaged

Permalink CVE-2023-46848

8.6 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): CHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 8 months, 1 week ago

Squid: denial of service in ftp

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

References

RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
https://security.netapp.com/advisory/ntap-20231214-0005/
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred
RHSA-2023:6266 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6268 vendor-advisoryx_refsource_REDHAT
RHSA-2023:6748 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHAT
RHBZ#2245919 x_refsource_REDHATissue-tracking
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
RHSA-2023:6266 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6268 vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2023:6748 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-46848 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2245919 x_refsource_REDHATissue-trackingx_transferred
https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w x_transferred
https://security.netapp.com/advisory/ntap-20231214-0005/ x_transferred

Affected products

squid

*
==6.4
<6.4

squid:4/squid

Matching in nixpkgs

pkgs.squid

Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more

nixos-unstable 7.0.1
- nixpkgs-unstable 7.0.1
- nixos-unstable-small 7.0.1

pkgs.prometheus-squid-exporter

Squid Prometheus exporter

nixos-unstable 1.13.0
- nixpkgs-unstable 1.13.0
- nixos-unstable-small 1.13.0

pkgs.python311Packages.flyingsquid

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0
- nixpkgs-unstable 0.0.0a0
- nixos-unstable-small 0.0.0a0

pkgs.python312Packages.flyingsquid

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0
- nixpkgs-unstable 0.0.0a0
- nixos-unstable-small 0.0.0a0

pkgs.python313Packages.flyingsquid

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0
- nixpkgs-unstable 0.0.0a0
- nixos-unstable-small 0.0.0a0

Package maintainers

@srhb Sarah Brofeldt <sbrofeldt@gmail.com>
@happysalada Raphael Megzari <raphael@megzari.com>
@7c6f434c Michael Raskin <7c6f434c@mail.ru>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.squid

pkgs.prometheus-squid-exporter

pkgs.python311Packages.flyingsquid

pkgs.python312Packages.flyingsquid

pkgs.python313Packages.flyingsquid

Package maintainers