CVE - CVE-2012-3505

CVE-ID
CVE-2012-3505	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably. bucket.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1027412 URL:http://www.securitytracker.com/id?1027412 MISC:50278 URL:http://secunia.com/advisories/50278 MISC:51074 URL:http://secunia.com/advisories/51074 MISC:DSA-2564 URL:http://www.debian.org/security/2012/dsa-2564 MISC:[oss-security] 20120817 CVE request: tinyproxy URL:http://www.openwall.com/lists/oss-security/2012/08/17/3 MISC:[oss-security] 20120818 Re: CVE request: tinyproxy URL:http://www.openwall.com/lists/oss-security/2012/08/18/1 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685281 URL:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685281 MISC:https://banu.com/bugzilla/show_bug.cgi?id=110 URL:https://banu.com/bugzilla/show_bug.cgi?id=110 MISC:https://banu.com/bugzilla/show_bug.cgi?id=110#c2 URL:https://banu.com/bugzilla/show_bug.cgi?id=110#c2 MISC:https://bugs.launchpad.net/ubuntu/+source/tinyproxy/+bug/1036985 URL:https://bugs.launchpad.net/ubuntu/+source/tinyproxy/+bug/1036985
Assigning CNA
Red Hat, Inc.
Date Record Created
20120614	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120614)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)