5

CVE-2012-3505

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably.  bucket.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Banu ≫ Tinyproxy Version <= 1.8.3
Banu ≫ Tinyproxy Version 1.5.0
Banu ≫ Tinyproxy Version 1.5.0 Update pre1
Banu ≫ Tinyproxy Version 1.5.0 Update pre2
Banu ≫ Tinyproxy Version 1.5.0 Update pre3
Banu ≫ Tinyproxy Version 1.5.0 Update pre4
Banu ≫ Tinyproxy Version 1.5.0 Update pre5
Banu ≫ Tinyproxy Version 1.5.0 Update pre6
Banu ≫ Tinyproxy Version 1.5.0 Update rc1
Banu ≫ Tinyproxy Version 1.5.0 Update rc10
Banu ≫ Tinyproxy Version 1.5.0 Update rc2
Banu ≫ Tinyproxy Version 1.5.0 Update rc4
Banu ≫ Tinyproxy Version 1.5.0 Update rc5
Banu ≫ Tinyproxy Version 1.5.0 Update rc6
Banu ≫ Tinyproxy Version 1.5.0 Update rc7
Banu ≫ Tinyproxy Version 1.5.0 Update rc8
Banu ≫ Tinyproxy Version 1.5.0 Update rc9
Banu ≫ Tinyproxy Version 1.5.1
Banu ≫ Tinyproxy Version 1.5.1 Update pre1
Banu ≫ Tinyproxy Version 1.5.1 Update pre2
Banu ≫ Tinyproxy Version 1.5.1 Update pre3
Banu ≫ Tinyproxy Version 1.5.1 Update pre4
Banu ≫ Tinyproxy Version 1.5.1 Update pre5
Banu ≫ Tinyproxy Version 1.5.1 Update pre6
Banu ≫ Tinyproxy Version 1.5.1 Update rc1
Banu ≫ Tinyproxy Version 1.5.1 Update rc2
Banu ≫ Tinyproxy Version 1.5.1 Update rc3
Banu ≫ Tinyproxy Version 1.5.1 Update rc4
Banu ≫ Tinyproxy Version 1.5.2
Banu ≫ Tinyproxy Version 1.5.2 Update rc1
Banu ≫ Tinyproxy Version 1.5.2 Update rc2
Banu ≫ Tinyproxy Version 1.5.3
Banu ≫ Tinyproxy Version 1.5.3 Update rc1
Banu ≫ Tinyproxy Version 1.6.0
Banu ≫ Tinyproxy Version 1.6.0 Update a
Banu ≫ Tinyproxy Version 1.6.0 Update pre1
Banu ≫ Tinyproxy Version 1.6.0 Update pre2
Banu ≫ Tinyproxy Version 1.6.0 Update pre3
Banu ≫ Tinyproxy Version 1.6.0 Update pre4
Banu ≫ Tinyproxy Version 1.6.0 Update rc1
Banu ≫ Tinyproxy Version 1.6.0 Update rc2
Banu ≫ Tinyproxy Version 1.6.0 Update rc3
Banu ≫ Tinyproxy Version 1.6.1
Banu ≫ Tinyproxy Version 1.6.2
Banu ≫ Tinyproxy Version 1.6.3
Banu ≫ Tinyproxy Version 1.6.4
Banu ≫ Tinyproxy Version 1.6.5
Banu ≫ Tinyproxy Version 1.7.0
Banu ≫ Tinyproxy Version 1.7.1
Banu ≫ Tinyproxy Version 1.8.0
Banu ≫ Tinyproxy Version 1.8.1
Banu ≫ Tinyproxy Version 1.8.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.35% 0.936
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685281
http://secunia.com/advisories/50278
http://secunia.com/advisories/51074
http://www.debian.org/security/2012/dsa-2564
http://www.openwall.com/lists/oss-security/2012/08/17/3
http://www.openwall.com/lists/oss-security/2012/08/18/1
http://www.securitytracker.com/id?1027412
https://banu.com/bugzilla/show_bug.cgi?id=110
https://banu.com/bugzilla/show_bug.cgi?id=110#c2
https://bugs.launchpad.net/ubuntu/+source/tinyproxy/+bug/1036985