CVE-2015-1031 Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) "two additional unconf...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) "two additional unconfirmed use-after-free complaints made by Coverity scan." NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/privoxy(Debian:12) | < 3.0.21-5 | 3.0.21-5 |
| debian/privoxy(Debian:13) | < 3.0.21-5 | 3.0.21-5 |
| debian/privoxy(Debian:14) | < 3.0.21-5 | 3.0.21-5 |
| privoxy | <= 3.0.21 | No fix listed |
References
- Debian Security Tracker CVE-2015-1031 vendor-advisory
- 62123 third-party-advisory
- DSA-3133 vendor-advisory
- [oss-security] 20150110 Re: CVE Request for Privoxy Version: 3.0.22 mailing-list
- www.privoxy.org patch vendor-advisory
- bugs.debian.org issue-tracking