Vulnerabilities

TI-2012-03033 CVE-2012-3505 · GHSA-h6wx-vrmp-rrjr

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and…

LOW 33

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predict…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07349 Published 2012-10-09 No fix listed CWE-310

TI-2011-01619 CVE-2011-1843 · GHSA-xm8h-gm5v-cggh

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to…

LOW 33

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port n…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01342 Published 2011-05-03 No fix listed CWE-189

TI-2011-01319 CVE-2011-1499 · GHSA-gf7c-j3g3-g2r4

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR…

LOW 17

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01755 Published 2011-04-29 No fix listed CWE-16

Vulnerabilities

Filters

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and…

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to…

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR…