312 matches found
CVE-2026-3945 tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...
CVE-2026-3945 tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...
CVE-2026-3945
Tinyproxy (up to 1.11.3) contains an integer overflow in the HTTP chunked transfer encoding parser. Chunk sizes are parsed with strtol() without proper overflow validation, allowing a crafted size (e.g., LONG_MAX) to bypass checks and overflow arithmetic (chunklen + 2). This can cause the proxy t...
CVE-2026-3945 tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...
CVE-2026-3945
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...
CVE-2026-3945: Integer Overflow or Wraparound
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...
Tinyproxy 安全漏洞
Tinyproxy is a small, efficient HTTP/SSL proxy daemon developed by Tinyproxy. Versions of Tinyproxy 1.11.3 and earlier contain security vulnerabilities, which stem from integer overflows in the HTTP chunked transmission encoding parser, potentially leading to denial-of-service attacks...
The vulnerability of the HTTP-proxy server Tinyproxy, related to integer overflows, allows attackers to induce a service failure.
The vulnerability of the HTTP proxy server Tinyproxy is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...
ROS-20260310-73-0020
Vulnerability in tinyproxy related to integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
PT-2026-28803
Name of the Vulnerable Software and Affected Versions tinyproxy versions prior to 1.11.3-2.1 Description An integer overflow exists in the HTTP chunked transfer encoding parser. The issue occurs because chunk size values are parsed using the strtol function without properly validating overflow...
[SECURITY] Fedora 42 Update: tinyproxy-1.11.2-5.fc42
tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a small network setting, where a larger proxy like Squid would either be too resource intensive, or a security risk...
Fedora: Security Advisory (FEDORA-2025-a177cf4e1e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : tinyproxy (2025-a177cf4e1e)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a177cf4e1e advisory. Add upstream patch to fix CVE-2025-63938. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
[SECURITY] Fedora 43 Update: tinyproxy-1.11.2-5.fc43
tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful in a small network setting, where a larger proxy like Squid would either be too resource intensive, or a security risk...
Fedora 43 : tinyproxy (2025-72fbf180c7)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-72fbf180c7 advisory. Add upstream patch to fix CVE-2025-63938. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
Fedora: Security Advisory (FEDORA-2025-72fbf180c7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2025-63938
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the stripreturnport function within src/reqs.c. CVE-2025-63938 Note that Nessus relies on...
SUSE CVE-2025-63938
Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the stripreturnport function within src/reqs.c...
Tinyproxy <= 1.11.2 Integer Overflow Vulnerability
Tinyproxy is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:banu:tinyproxy"; if...
