CVE-2023-46846 — SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenienc

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

01What is this vulnerability?

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

02Affected products

Vendor	Product	Versions
?	?	2.6
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	7:3.5.20-17.el7_9.13
Red Hat	Red Hat Enterprise Linux 8	8080020231030214932.63b34585
Red Hat	Red Hat Enterprise Linux 8	8090020231030224841.a75119d5
Red Hat	Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	8010020231101141358.c27ad7f8
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	8020020231101135052.4cda2c84
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	8020020231101135052.4cda2c84
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	8020020231101135052.4cda2c84
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	8040020231101101624.522a0ee4
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	8040020231101101624.522a0ee4
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	8040020231101101624.522a0ee4
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	8060020231031165747.ad008a3a
Red Hat	Red Hat Enterprise Linux 9	7:5.5-5.el9_2.1
Red Hat	Red Hat Enterprise Linux 9	7:5.5-6.el9_3.1
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	7:5.2-1.el9_0.3
Red Hat	Red Hat Enterprise Linux 6	unspecified
Red Hat	Red Hat Enterprise Linux 6	unspecified

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

• Patch to a fixed version listed in the vendor advisory (see references below).
• Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
• Hunt historical logs for exploitation indicators — see Detection signatures below.

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

• Published: 2023-11-03T07:33:16.184Z
• Last modified: 2026-02-25T18:19:15.815Z

09References

• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6266
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6267
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6268
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6748
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6801
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6803
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6804
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:6810
• access.redhat.com — https://access.redhat.com/errata/RHSA-2023:7213
• access.redhat.com — https://access.redhat.com/errata/RHSA-2024:11049
• access.redhat.com — https://access.redhat.com/security/cve/CVE-2023-46846
• bugzilla.redhat.com — https://bugzilla.redhat.com/show_bug.cgi?id=2245910
• github.com — https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh