Ubuntu
tinyproxy package

  1. Bug #1154502
  2. Comment #5

Comment 5 for bug 1154502

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package tinyproxy - 1.8.3-1ubuntu0.1

---------------
tinyproxy (1.8.3-1ubuntu0.1) precise-security; urgency=low

  * SECURITY UPDATE: Fix for denial of service vulnerability where remote
    attackers send crafted request headers. (LP: #1154502)
    - debian/patches/001-CVE-2012-3505.patch: Limit the number of headers to
      prevent DoS attacks. Randomize hashmaps in order to avoid fake headers
      getting included in the same bucket, allowing for DoS attacks.
    - CVE-2012-3505
 -- Christian Kuersteiner <email address hidden> Wed, 13 Mar 2013 16:42:14 +0700