PT-2015-5026 · Privoxy+1 · Privoxy+1

Yury German · Published 2015-01-20 · Updated 2024-06-15 · CVE-2015-1030

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Privoxy versions prior to 3.0.22

Description A memory leak in the rfc2553 connect to function in jbsocket.c allows remote attackers to cause a denial of service by consuming memory via a large number of requests that are rejected due to the socket limit being reached.

Recommendations For versions prior to 3.0.22, update to version 3.0.22 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2015-1335

CVE-2015-1030

OPENSUSE-SU-2024:10494-1

Affected Products

Alt Linux

Privoxy

References · 24

• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1030 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1381 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2015-1030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1030 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1382 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1031 · Security Note
• https://osv.dev/vulnerability/CVE-2015-1030 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1335 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1030 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10494-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1380 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1201 · Security Note
• http://privoxy.org/announce.txt · Vendor Advisory
• http://openwall.com/lists/oss-security/2015/01/11/1 · Note
• https://suse.com/security/cve/CVE-2015-1382 · Note