PT-2015-7880 · Privoxy · Privoxy

Published 2015-01-05 · Updated 2015-01-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions privoxy version 3.0.21

Description A memory leak occurred in privoxy when rejecting client connections due to the socket limit being reached, specifically in versions compiled with IPv6 support. Additionally, a use-after-free bug and two potential use-after-free issues were found. A file descriptor leak was also detected in an error path in jbsockets.c.

Recommendations For privoxy version 3.0.21, update to a newer version that includes the fixes for the mentioned security issues. As a temporary workaround, consider restricting the number of client connections to prevent the socket limit from being reached, which may help mitigate the memory leak issue.

Related Identifiers

MGASA-2015-0003

Affected Products

Privoxy

References · 4

• https://advisories.mageia.org/MGASA-2015-0003.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0003 · Vendor Advisory
• http://privoxy.org/announce.txt · Note
• https://bugs.mageia.org/show_bug.cgi?id=14892 · Note