Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Gpernot

#49085of 53,624
5Total CVSS
Vulnerabilities · 1
PT-2012-4769
5.0
2012-10-09
Tinyproxy · Tinyproxy · CVE-2012-3505
**Name of the Vulnerable Software and Affected Versions** Tinyproxy versions 1.8.3 and earlier **Description** The issue allows remote attackers to cause a denial of service, consuming CPU and memory, via two methods: (1) sending a large number of headers or (2) sending a large number of forged headers that trigger hash collisions predictably. **Recommendations** For Tinyproxy versions 1.8.3 and earlier, consider updating to a version later than 1.8.3 to resolve the issue. As a temporary workaround, consider restricting the number of headers allowed in incoming requests to minimize the risk of exploitation.