CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-49606:...

Tinyproxy < 1.11.2 - Use After Free in HTTP Connection Header

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.10.0 through 1.11.1. The removeconnectionheaders function in reqs.c frees a header value pointer that is subsequently reused during header iteration, leading to memory corruption. An unauthenticated remote...

CVE-2026-125371

A flaw was found in Tinyproxy. The proxy server improperly validates client hostnames against access control lists ACLs by matching trailing characters without verifying Domain Name System DNS label boundaries. A remote attacker who controls reverse DNS pointer PTR records for their IP address ca...

SUSE CVE-2026-125371

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125371

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

EUVD-2026-120534

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

DEBIAN-CVE-2026-125371

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125371

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125371: tinyproxy: Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl_string_processing() in src/acl.c that…

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

UBUNTU-CVE-2026-125371

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

Linux Distros Unpatched Vulnerability : CVE-2026-125371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters...

CVE-2026-125371 Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125371

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125371 Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125371

Versions of Tinyproxy through 1.11.3 are vulnerable to an access control bypass within the acl_string_processing() function in src/acl.c . The root cause is a partial string comparison that evaluates only trailing hostname characters without verifying DNS label boundaries . This allows an attacke...

CVE-2026-125371 Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

PT-2026-141194

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl string processing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an...

CLEANSTART-2024-BH81298 use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1

Security vulnerability affects the tinyproxy package. A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1...

openSUSE 16 Security Update : tinyproxy (openSUSE-SU-2026:22133-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22133-1 advisory. Changes in tinyproxy: - Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding boo1268474, CVE-2026-54387 - Fixed failure t...

Security update for tinyproxy (critical)

openSUSE security update: security update for tinyproxy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22133-1 Rating: critical References: bsc1268474 bsc1268475 bsc1268476 Cross-References: CVE-2026-54387 CVE-2026-54388 CVE-2026-55202 Affected...