PT-2015-7882 · Privoxy · Privoxy

Published 2015-01-27 · Updated 2015-01-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Privoxy (affected versions not specified)

Description The issue concerns several security problems. One problem is a DoS issue that occurs when Privoxy receives client requests with incorrect chunk-encoded bodies, which could cause Privoxy to abort when compiled with assertions enabled. Additionally, there were multiple segmentation faults and memory leaks in the pcrs code, which have been fixed to increase the chances of rejecting invalid pcrs commands. An 'invalid read' bug that could theoretically cause Privoxy to crash has also been fixed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0042

Affected Products

Privoxy

References · 4

• https://osv.dev/vulnerability/MGASA-2015-0042 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0042.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=15135 · Note
• http://openwall.com/lists/oss-security/2015/01/26/4 · Note