Memory Leak Vulnerability in Privoxy Web Proxy
CVE-2015-1030

Currently unrated

Key Information:

Vendor

Privoxy

Status
Privoxy
Vendor
CVE Published:
20 January 2015

What is CVE-2015-1030?

The vulnerability in Privoxy's rfc2553_connect_to function causes a memory leak due to improper handling of socket connections. When attackers send a multitude of requests, they can exceed the socket limit, resulting in a denial of service as the system's memory is consumed excessively. This allows attackers to disrupt the normal operation of Privoxy by overwhelming its resources, affecting its ability to manage valid connections.

References

http://secunia.com/advisories/62123
third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2015/01/11/1
mailing-listx_refsource_MLIST
http://www.privoxy.org/announce.txt
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.