curl: curl reuses an HTTPS connection when a response is already buffered in the TLS stack

curl master 15292ed75, 8.23.1-DEV reuses an idle HTTP/1.1-over-TLS connection even when a complete extra response is already buffered in OpenSSL/GnuTLS. The ef6b17cf1 fix only polls the socket: Curlcpoolconnseemshealthy lib/conncache.c:1073, called from lib/url.c:1071 uses Curlconnisalive, and...

CVE-2020-35502: Missing Release of Memory after Effective Lifetime

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash...

Denial Of Service (DoS)

centra is vulnerable to denial of service DoS attacks. The library does not restrict the buffered response body when requesting content from untrusted sources, allowing an attacker to cause an application crash...