Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.
References
| Link | Resource |
|---|---|
| https://github.com/tinyproxy/tinyproxy | Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/blob/84f203fb1c4733608c7283bbe794005a469c4b00/src/reqs.c#L346 | Exploit Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/issues/457 | Exploit Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/issues/457#issuecomment-1264176815 | |
| https://security.gentoo.org/glsa/202305-27 | |
| https://github.com/tinyproxy/tinyproxy | Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/blob/84f203fb1c4733608c7283bbe794005a469c4b00/src/reqs.c#L346 | Exploit Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/issues/457 | Exploit Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/issues/457#issuecomment-1264176815 | |
| https://security.gentoo.org/glsa/202305-27 |
Configurations
History
21 Nov 2024, 07:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/tinyproxy/tinyproxy - Third Party Advisory | |
| References | () https://github.com/tinyproxy/tinyproxy/blob/84f203fb1c4733608c7283bbe794005a469c4b00/src/reqs.c#L346 - Exploit, Third Party Advisory | |
| References | () https://github.com/tinyproxy/tinyproxy/issues/457 - Exploit, Third Party Advisory | |
| References | () https://github.com/tinyproxy/tinyproxy/issues/457#issuecomment-1264176815 - | |
| References | () https://security.gentoo.org/glsa/202305-27 - |
Information
Published : 2022-09-19 17:15
Updated : 2024-11-21 07:21
NVD link : CVE-2022-40468
Mitre link : CVE-2022-40468
CVE.ORG link : CVE-2022-40468
JSON object : View
Products Affected
tinyproxy_project
- tinyproxy
CWE
CWE-1188
Insecure Default Initialization of Resource