Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Yikesoftware

#37502of 53,622
7.5Total CVSS
Vulnerabilities · 1
PT-2022-25392
7.5
2022-09-19
Tinyproxy · Tinyproxy · CVE-2022-40468
**Name of the Vulnerable Software and Affected Versions** Tinyproxy versions prior to commit 84f203f **Description** The issue is related to a potential leak of left-over heap data when custom error page templates containing special non-standard variables are used. This occurs because Tinyproxy commit 84f203f and earlier use uninitialized buffers in the `process request()` function. **Recommendations** For versions prior to commit 84f203f, consider updating to a version that initializes buffers properly in the `process request()` function to prevent the potential leak of left-over heap data. As a temporary workaround, avoid using custom error page templates with special non-standard variables until a patch is available.