Squid: request/response smuggling in http/1.1 and icap

LLM-synthesized narrative grounded in this CVE's description and references.

• Squid Cache/SquidOSV

  Range: 4.15-20210522-snapshot, 4.15-20210523-snapshot, 4.15-20210524-snapshot, …
• Squidex/Squidexllm-fuzzy
• osv-coords21 versions

  pkg:rpm/almalinux/libecappkg:rpm/almalinux/libecap-develpkg:rpm/almalinux/squidpkg:rpm/opensuse/squid&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/squid&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/squid&distro=openSUSE%20Tumbleweedpkg:rpm/suse/squid&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3

  < 1.0.1-2.module_el8.6.0+2741+01592ae8+ 20 more

  • (no CPE)range: < 1.0.1-2.module_el8.6.0+2741+01592ae8
  • (no CPE)range: < 1.0.1-2.module_el8.6.0+2741+01592ae8
  • (no CPE)range: < 7:5.5-5.el9_2.1
  • (no CPE)range: < 5.7-150400.3.12.1
  • (no CPE)range: < 5.7-150400.3.12.1
  • (no CPE)range: < 6.4-1.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 5.7-150400.3.12.1
  • (no CPE)range: < 5.7-150400.3.12.1
  • (no CPE)range: < 4.17-4.30.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-4.30.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1
  • (no CPE)range: < 4.17-150000.5.38.1

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

• access.redhat.com/errata/RHSA-2023:6266mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:6267mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:6268mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:6748mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:6801mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:6803mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:6804mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:6810mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2023:7213mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/errata/RHSA-2024:11049mitrevendor-advisoryx_refsource_REDHAT
• access.redhat.com/security/cve/CVE-2023-46846mitrevdb-entryx_refsource_REDHAT
• bugzilla.redhat.com/show_bug.cgimitreissue-trackingx_refsource_REDHAT
• github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqhmitre

No linked articles in our index yet.