CVE-2015-1031
HighSummary
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to the unmap function in list.c or two additional unconfirmed use-after-free complaints made by Coverity scan.
Risk Assessment
These vulnerabilities may lead to unauthorized access or execution of malicious code, posing a serious threat to the security of systems using Privoxy.
Recommendation
It is recommended to update Privoxy to version 3.0.22 or later to mitigate these vulnerabilities and to monitor systems for potential attacks.
Other vulnerabilities in Privoxy
See all- CVE-2016-1983High
The client_host function in parsers.c in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.
- CVE-2016-1982High
The remove_chunked_transfer_coding function in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.
Original NVD description (English source)
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) "two additional unconfirmed use-after-free complaints made by Coverity scan." NOTE: some of these details are obtained from third party information.