Denial of Service Vulnerability in Privoxy by Privoxy Project
CVE-2015-1380

Currently unrated

Key Information:

Vendor: Privoxy
Status: Privoxy
Vendor: CVE Published:; 3 February 2015

What is CVE-2015-1380?

A vulnerability exists in versions of Privoxy prior to 3.0.23 that allows remote attackers to cause a denial of service. This is achieved through sending a specially crafted chunk-encoded body, leading the application to abort unexpectedly. It's crucial for users of affected versions to upgrade to the latest release to mitigate this risk and maintain secure operations.

References

http://www.openwall.com/lists/oss-security/2015/01/26/4

mailing-listx_refsource_MLIST

http://secunia.com/advisories/62899

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/bid/72355

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 3, 2015
Vulnerability Reserved
Jan 27, 2015

CVE-2015-1380 Data

JSON