[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

DSA-2002-1 polipo - denial of service

Bulletin has no description...

CVE-2009-4413

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-3305

Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in httpparse.c, and possibly other...

CVE-2009-4413

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-3305

Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in httpparse.c, and possibly other...

Cross site request forgery (csrf)

Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in httpparse.c, and possibly other...

Integer overflow

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-3305

Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in httpparse.c, and possibly other...

CVE-2009-4413

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-3305

Removed by vendor...

CVE-2009-4413

CVE-2009-4413 affects the Polipo web proxy. The issue resides in httpClientDiscardBody in client.c, present in Polipo versions such as 0.9.8, 0.9.12, and 1.0.4. A crafted remote request with a large Content-Length triggers an integer overflow and a signed-to-unsigned conversion error, leading to ...

CVE-2009-4413

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-3305

Polipo is affected: Polipo 1.0.4 (and possibly other versions) is vulnerable to a remote denial-of-service where a crafted Cache-Control header missing max-age triggers a segmentation fault in httpParseHeaders (http_parse.c), leading to a crash. Exploitation status and vectors: remote trigger via...

CVE-2009-4413

Removed by vendor...

CVE-2009-3305

Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in httpparse.c, and possibly other...

Polipo Malformed HTTP GET Request Memory Corruption Vulnerability

Polipo is prone to a memory-corruption vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Polipo Malformed HTTP GET Request Memory Corruption Vulnerability

Polipo is prone to a memory-corruption vulnerability. Successful exploits may allow remote attackers to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users. Polipo 0.9.8 and 1.0.4 are vulnerable; other versions may al...