MGASA-2016-0055

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2016-0055.html
Import Source
https://advisories.mageia.org/MGASA-2016-0055.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2016-0055
Related
Published
2016-02-09T13:05:25Z
Modified
2016-02-09T12:43:34Z
Summary
Updated privoxy packages fix security vulnerabilities
Details

This update fixes two denial-of-service vulnerabilities that have been discovered in privoxy 3.0.23:

The removechunkedtransfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content. (CVE-2016-1982)

The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header. (CVE-2016-1983)

References
Credits

Affected packages

Mageia:5 / privoxy

Package

Name
privoxy
Purl
pkg:rpm/mageia/privoxy?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.23-1.1.mga5

Ecosystem specific 

{
    "section": "core"
}