CVE-2020-36420

2021-07-1500:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CPENameOperatorVersion
polipoeqpolipo-0.9.4
polipoeqpolipo-0.9.99.0
polipoeqpolipo-20060920
polipoeqpolipo-20061218
polipoeqpolipo-20061116
polipoeqpolipo-20080106-2
polipoeqpolipo-syslog-20070909
polipoeqpolipo-20080103
polipoeqpolipo-1.0.3
polipoeqpolipo-20060905

Name	Operator	Version
polipo	eq	polipo-0.9.4
polipo	eq	polipo-0.9.99.0
polipo	eq	polipo-20060920
polipo	eq	polipo-20061218
polipo	eq	polipo-20061116
polipo	eq	polipo-20080106-2
polipo	eq	polipo-syslog-20070909
polipo	eq	polipo-20080103
polipo	eq	polipo-1.0.3
polipo	eq	polipo-20060905