VDB

ALINUX2-SA-2025%3A0004

ALINUX2-SA-2025%3A0004 PUBLISHED CVSS 9.300000190734863 CRITICAL

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2023-46846: SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

Risk Scores

CVSS 3.1
9.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Affected Products

VendorProductVersions
Alibaba Cloudsquid

Timeline

  • Jan 10, 2025 CVE Published
  • Jan 10, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›