CVE-2002-0847 tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tinyproxy | = 1.3.2 | No fix listed |
| tinyproxy | = 1.3.3 | No fix listed |
| tinyproxy | = 1.4.3 | No fix listed |
| debian/tinyproxy(Debian:12) | < 1.4.3-3 | 1.4.3-3 |
| debian/tinyproxy(Debian:13) | < 1.4.3-3 | 1.4.3-3 |
| debian/tinyproxy(Debian:14) | < 1.4.3-3 | 1.4.3-3 |
References
- sourceforge.net
- tinyproxy-memory-corruption(9079) patch vdb-entry vendor-advisory
- 4731 patch vdb-entry vendor-advisory
- DSA-145 vendor-advisory
- Debian Security Tracker CVE-2002-0847 vendor-advisory