Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.
References
| Link | Resource |
|---|---|
| https://github.com/tinyproxy/tinyproxy | Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/issues/457 | Exploit Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/blob/84f203fb1c4733608c7283bbe794005a469c4b00/src/reqs.c#L346 | Exploit Third Party Advisory |
| https://github.com/tinyproxy/tinyproxy/issues/457#issuecomment-1264176815 |
Advertisement
Configurations
Information
Published : 2022-09-19 10:15
Updated : 2022-10-11 17:15
NVD link : CVE-2022-40468
Mitre link : CVE-2022-40468
JSON object : View
CWE
CWE-1188
Insecure Default Initialization of Resource
Advertisement
Products Affected
tinyproxy_project
- tinyproxy