CVE-2012-3505 Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger has...
MediumCVSS 5.0
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably. bucket.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tinyproxy(Debian:12) | < 1.8.3-3 | 1.8.3-3 |
| debian/tinyproxy(Debian:13) | < 1.8.3-3 | 1.8.3-3 |
| debian/tinyproxy(Debian:14) | < 1.8.3-3 | 1.8.3-3 |
| banu tinyproxy | <= 1.8.3 | No fix listed |
| banu tinyproxy | = 1.5.0 | No fix listed |
| banu tinyproxy | = 1.5.0-pre1 | No fix listed |
| banu tinyproxy | = 1.5.0-pre2 | No fix listed |
| banu tinyproxy | = 1.5.0-pre3 | No fix listed |
| banu tinyproxy | = 1.5.0-pre4 | No fix listed |
| banu tinyproxy | = 1.5.0-pre5 | No fix listed |
| banu tinyproxy | = 1.5.0-pre6 | No fix listed |
| banu tinyproxy | = 1.5.0-rc1 | No fix listed |
| banu tinyproxy | = 1.5.0-rc10 | No fix listed |
| banu tinyproxy | = 1.5.0-rc2 | No fix listed |
| banu tinyproxy | = 1.5.0-rc4 | No fix listed |
| banu tinyproxy | = 1.5.0-rc5 | No fix listed |
| banu tinyproxy | = 1.5.0-rc6 | No fix listed |
| banu tinyproxy | = 1.5.0-rc7 | No fix listed |
| banu tinyproxy | = 1.5.0-rc8 | No fix listed |
| banu tinyproxy | = 1.5.0-rc9 | No fix listed |
| banu tinyproxy | = 1.5.1 | No fix listed |
| banu tinyproxy | = 1.5.1-pre1 | No fix listed |
| banu tinyproxy | = 1.5.1-pre2 | No fix listed |
| banu tinyproxy | = 1.5.1-pre3 | No fix listed |
| banu tinyproxy | = 1.5.1-pre4 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| banu tinyproxy | = 1.5.1-pre5 | No fix listed |
| banu tinyproxy | = 1.5.1-pre6 | No fix listed |
| banu tinyproxy | = 1.5.1-rc1 | No fix listed |
| banu tinyproxy | = 1.5.1-rc2 | No fix listed |
| banu tinyproxy | = 1.5.1-rc3 | No fix listed |
| banu tinyproxy | = 1.5.1-rc4 | No fix listed |
| banu tinyproxy | = 1.5.2 | No fix listed |
| banu tinyproxy | = 1.5.2-rc1 | No fix listed |
| banu tinyproxy | = 1.5.2-rc2 | No fix listed |
| banu tinyproxy | = 1.5.3 | No fix listed |
| banu tinyproxy | = 1.5.3-rc1 | No fix listed |
| banu tinyproxy | = 1.6.0 | No fix listed |
| banu tinyproxy | = 1.6.0-a | No fix listed |
| banu tinyproxy | = 1.6.0-pre1 | No fix listed |
| banu tinyproxy | = 1.6.0-pre2 | No fix listed |
| banu tinyproxy | = 1.6.0-pre3 | No fix listed |
| banu tinyproxy | = 1.6.0-pre4 | No fix listed |
| banu tinyproxy | = 1.6.0-rc1 | No fix listed |
| banu tinyproxy | = 1.6.0-rc2 | No fix listed |
| banu tinyproxy | = 1.6.0-rc3 | No fix listed |
| banu tinyproxy | = 1.6.1 | No fix listed |
| banu tinyproxy | = 1.6.2 | No fix listed |
| banu tinyproxy | = 1.6.3 | No fix listed |
| banu tinyproxy | = 1.6.4 | No fix listed |
| banu tinyproxy | = 1.6.5 | No fix listed |
| banu tinyproxy | = 1.7.0 | No fix listed |
| banu tinyproxy | = 1.7.1 | No fix listed |
| banu tinyproxy | = 1.8.0 | No fix listed |
| banu tinyproxy | = 1.8.1 | No fix listed |
| banu tinyproxy | = 1.8.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-3505 vendor-advisory
- bugs.debian.org
- 50278 third-party-advisory
- 51074 third-party-advisory
- DSA-2564 vendor-advisory
- [oss-security] 20120817 CVE request: tinyproxy mailing-list
- [oss-security] 20120818 Re: CVE request: tinyproxy mailing-list
- 1027412 vdb-entry
- banu.com
- bugs.launchpad.net
- bugs.debian.org issue-tracking