CVE-2023-5824 Squid: dos against http and https

Api.Msrc.Microsoft • February 21, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Denial of Service Vulnerabilities in Squid HTTP Digest Authentication Two denial of service vulnerabilities have been identified in Squid, affecting http digest authentication and both http and https protocols. The vulnerabilities, CVE-2023-46847 and CVE-2023-5824, were published on November 3, 2023, and require immediate attention from system administrators to mitigate potential exploitation. 2 sources 41

Extracted Entities

Attack Types (1)

Denial of Service

CVEs (1)

MITRE ATT&CK (1)

T1499 - Endpoint Denial of Service

Platforms (1)