PT-2015-7880 · Privoxy · Privoxy

Publicado 2015-01-05 · Atualizado 2015-01-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions privoxy version 3.0.21

Description A memory leak occurred in privoxy when rejecting client connections due to the socket limit being reached, specifically in versions compiled with IPv6 support. Additionally, a use-after-free bug and two potential use-after-free issues were found. A file descriptor leak was also detected in an error path in jbsockets.c.

Recommendations For privoxy version 3.0.21, update to a newer version that includes the fixes for the mentioned security issues. As a temporary workaround, consider restricting the number of client connections to prevent the socket limit from being reached, which may help mitigate the memory leak issue.

Identificadores relacionados

MGASA-2015-0003

Produtos afetados

Privoxy

Referências · 4

• https://advisories.mageia.org/MGASA-2015-0003.html · Nota de Segurança
• http://privoxy.org/announce.txt · Nota
• https://osv.dev/vulnerability/MGASA-2015-0003 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=14892 · Nota