Back to Database
Status published
High
CVE-2023-46848
Squid: denial of service in ftp
Vulnerability Description
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-46848
Credits & Attribution
No credits recorded in the NVD database.
References
- https://access.redhat.com/errata/RHSA-2023:6266
- https://access.redhat.com/errata/RHSA-2023:6268
- https://access.redhat.com/errata/RHSA-2023:6748
- https://access.redhat.com/security/cve/CVE-2023-46848
- https://bugzilla.redhat.com/show_bug.cgi?id=2245919
- https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w
More from Unknown
View All →CVE-2025-9978
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Unknown
0
CVE-2025-9959
Sandbox escape in smolagents Local Python execution environment via dunder attributes
High
7.6
CVE-2025-9900
Libtiff: libtiff write-what-where
High
8.8
CVE-2025-9784
Undertow: undertow madeyoureset http/2 ddos vulnerability
High
7.5
CVE-2025-9710
Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments
Unknown
0
Affected Vendor
Unknown
View all reports →Affected Software
Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
Vulnerable Versions:
5.0.3, 7:5.5-5.el9_2.1, 7:5.5-6.el9_3.1, 7:5.2-1.el9_0.3
Timeline
Official Publish:
November 3rd, 2023
Last Modified:
February 25th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.