Vulnerabilities

TI-2021-16196 CVE-2021-38614 · GHSA-475r-cf2c-9qxh

Polipo through 1.1.1, when NDEBUG is used, allows a heap-based buffer overflow during…

MEDIUM 41

Polipo through 1.1.1, when NDEBUG is used, allows a heap-based buffer overflow during parsing of a Range header.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01193 Published 2021-08-12 No fix listed CWE-787

TI-2020-18668 CVE-2020-36420 · GHSA-5hfj-73cx-942m

LOW 37

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01901 Published 2021-07-14 No fix listed CWE-617

TI-2011-03171 CVE-2011-3596 · GHSA-rc34-472p-6fgh

MEDIUM 46

Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11055 Published 2019-11-25 Fixed in 1.0.4.1 CWE-617