Denial of Service Vulnerability in Privoxy by Sanight Software
CVE-2016-1983

7.5HIGH

Key Information:

Vendor

Privoxy

Status
Privoxy
Vendor
CVE Published:
27 January 2016

What is CVE-2016-1983?

The client_host function in the Parsers component of Privoxy prior to version 3.0.24 is susceptible to a denial of service attack. Remote attackers can exploit this vulnerability by sending an empty HTTP Host header, leading to invalid read operations and potential crashes of the service. It is essential for users running affected versions to upgrade to prevent service disruption.

References

http://www.debian.org/security/2016/dsa-3460
vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2016/01/22/3
mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2016/01/21/4
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.