CVE-2012-3505

Name of the Vulnerable Software and Affected Versions Tinyproxy versions 1.8.3 and earlier

Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory, via two methods: (1) sending a large number of headers or (2) sending a large number of forged headers that trigger hash collisions predictably.

Recommendations For Tinyproxy versions 1.8.3 and earlier, consider updating to a version later than 1.8.3 to resolve the issue. As a temporary workaround, consider restricting the number of headers allowed in incoming requests to minimize the risk of exploitation.