CVE-2023-46846

Published: Nov 3, 2023

Modified: Feb 25, 2026

PUBLISHED

CVSS v3.1

9.3

CRITICAL

Description

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

Vendor	Product	Versions
Unknown	squid	affected `2.6 - < 6.4`
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	unaffected `7:3.5.20-17.el7_9.13 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `8080020231030214932.63b34585 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `8090020231030224841.a75119d5 - < *`
Red Hat	Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	unaffected `8010020231101141358.c27ad7f8 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	unaffected `8020020231101135052.4cda2c84 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	unaffected `8020020231101135052.4cda2c84 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	unaffected `8020020231101135052.4cda2c84 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected `8040020231101101624.522a0ee4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected `8040020231101101624.522a0ee4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	unaffected `8040020231101101624.522a0ee4 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	unaffected `8060020231031165747.ad008a3a - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `7:5.5-5.el9_2.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `7:5.5-6.el9_3.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	unaffected `7:5.2-1.el9_0.3 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions