Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Debian Bookworm DSA-5705-1 Critical: Tinyproxy Denial of Service

debian
Calendar Grey June 5, 2024
Debian Logo
Enhance tinyproxy following an urgent use-after-free vulnerability that leads to denial of service as outlined in Debian DSA-5705-1.
A use-after-free was discovered in tinyproxy, a lightweight, non-caching, optionally anonymizing HTTP proxy, which could result in denial of service

Summary

A use-after-free was discovered in tinyproxy, a lightweight, non-caching,
optionally anonymizing HTTP proxy, which could result in denial of
service.

For the stable distribution (bookworm), this problem has been fixed in
version 1.11.1-2.1+deb12u1.

We recommend that you upgrade your tinyproxy packages.

For the detailed security status of tinyproxy please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/tinyproxy

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: tinyproxy
CVE ID: CVE-2023-49606

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here