PT-2015-7882 · Privoxy · Privoxy

Publicado 2015-01-27 · Atualizado 2015-01-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Privoxy (affected versions not specified)

Description The issue concerns several security problems. One problem is a DoS issue that occurs when Privoxy receives client requests with incorrect chunk-encoded bodies, which could cause Privoxy to abort when compiled with assertions enabled. Additionally, there were multiple segmentation faults and memory leaks in the pcrs code, which have been fixed to increase the chances of rejecting invalid pcrs commands. An 'invalid read' bug that could theoretically cause Privoxy to crash has also been fixed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0042

Produtos afetados

Privoxy

Referências · 4

• https://bugs.mageia.org/show_bug.cgi?id=15135 · Nota
• http://openwall.com/lists/oss-security/2015/01/26/4 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0042 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0042.html · Nota de Segurança