CVE-2016-1983
HighSummary
The client_host function in parsers.c in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.
Risk Assessment
Attackers can exploit this vulnerability to disrupt service availability, potentially leading to application downtime.
Recommendation
It is recommended to update Privoxy to version 3.0.24 or later to mitigate this vulnerability.
Other vulnerabilities in Privoxy
See all- CVE-2016-1982High
The remove_chunked_transfer_coding function in Privoxy before version 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.
- CVE-2015-1031High
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to the unmap function in list.c or two additional unconfirmed use-after-free complaints made by Coverity scan.
Original NVD description (English source)
The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.