CVE-2016-1982
HighSummary
The remove_chunked_transfer_coding function in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.
Risk Assessment
Attackers can exploit this vulnerability to remotely disrupt the service, potentially leading to application downtime and loss of availability for users.
Recommendation
It is recommended to upgrade Privoxy to version 3.0.24 or later to mitigate this vulnerability and secure the system against potential attacks.
Other vulnerabilities in Privoxy
See all- CVE-2016-1983High
The client_host function in parsers.c in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.
- CVE-2015-1031High
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to the unmap function in list.c or two additional unconfirmed use-after-free complaints made by Coverity scan.
Original NVD description (English source)
The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.