655 matches found
CVE-2015-1201
Privoxy before 3.0.22 allows remote attackers to cause a denial of service file descriptor consumption via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
UBUNTU-CVE-2015-1201
Privoxy before 3.0.22 allows remote attackers to cause a denial of service file descriptor consumption via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2015-1201
CVE-2015-1201 affects Privoxy before 3.0.22, enabling remote denial of service via file descriptor consumption. Multiple sources confirm the issue and mention third‑party provenance for the vulnerability details. Affected component: Privoxy proxy server; vulnerability type: DoS via unspecified ve...
CVE-2015-1030
Privoxy vulnerability CVE-2015-1030: memory leak in rfc2553_connect_to (jbsocket.c) before 3.0.22 can cause DoS by exhausting sockets with a flood of rejected requests. Affected: Privoxy 3.0.x prior to 3.0.22. Mitigation: upgrade to 3.0.22 or later. Exploitation details are not provided beyond th...
CVE-2015-1030
Memory leak in the rfc2553connectto function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of requests that are rejected because the socket limit is reached...
CVE-2015-1201
Privoxy before 3.0.22 allows remote attackers to cause a denial of service file descriptor consumption via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2015-1030
Memory leak in the rfc2553connectto function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of requests that are rejected because the socket limit is reached...
Debian Security Advisory DSA 3133-1 (privoxy - security update)
Multiple use-after-frees were discovered in Privoxy, a privacy-enhancing HTTP proxy. OpenVAS Vulnerability Test $Id: deb3133.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3133-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 201...
DSA-3133-1 privoxy - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3133-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Multiple Remote Code Execution Vulnerabilities in Privoxy
Privoxy is a proxy server with filtering for HTTP and HTTPS protocols, often used in combination with Tor. Privoxy suffers from multiple remote code execution vulnerabilities that can be exploited by an attacker to execute arbitrary code in the context of a user running an affected application. o...
Privoxy Information Disclosure Vulnerability
Privoxy is a proxy server with filtering for HTTP and HTTPS protocols, often used in combination with Tor. Privoxy has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
privoxy -- multiple vulnerabilities
Privoxy Developers reports: Fixed a memory leak when rejecting client connections due to the socket limit being reached CID 66382. This affected Privoxy 3.0.21 when compiled with IPv6 support on most platforms this is the default. Fixed an immediate-use-after-free bug CID 66394 and two additional...
Updated privoxy package fixes security vulnerabilities
Updated privoxy packages fix security issues: A memory leak occurred in privoxy 3.0.21 compiled with IPv6 support when rejecting client connections due to the socket limit being reached. CID 66382 A use-after-free bug was found in privoxy 3.0.21 and two additional potential use-after-free issues...
MGASA-2015-0003 Updated privoxy package fixes security vulnerabilities
Updated privoxy packages fix security issues: A memory leak occurred in privoxy 3.0.21 compiled with IPv6 support when rejecting client connections due to the socket limit being reached. CID 66382 A use-after-free bug was found in privoxy 3.0.21 and two additional potential use-after-free issues...
Updated privoxy package fixes security vulnerability
The logrotate configuration of the privoxy package did not function properly, causing its log files not to be rotated. The log files could potentially fill up the disk...
MGASA-2014-0463 Updated privoxy package fixes security vulnerability
The logrotate configuration of the privoxy package did not function properly, causing its log files not to be rotated. The log files could potentially fill up the disk...
[SECURITY] Fedora 19 Update: tor-0.2.4.23-1.fc19
Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...
openSUSE Security Update : privoxy (openSUSE-2013-242)
privoxy was updated to 3.0.21 stable fo fix CVE-2013-2503 bnc809123 - changes in 3.0.21 - On POSIX-like platforms, network sockets with file descriptor values above FDSETSIZE are properly rejected. Previously they could cause memory corruption in configurations that allowed the limit to be reache...
Privoxy < 3.0.21 Multiple Information Disclosure Vulnerabilities
According to its self-identified version number, the Privoxy installed on the remote host is a version prior to 3.0.21. It is, therefore, affected by multiple information disclosure vulnerabilities due to the application not properly handling Proxy-Authenticate and Proxy-Authorization headers. Th...