PT-2021-27317
تاريخ النشر
2021-01-04
·
تاريخ التحديث
2021-01-04
الوصف من
الدرجة
N/A
غير متوفرلا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.
Name of the Vulnerable Software and Affected Versions:
privoxy versions prior to 3.0.29
Description:
The issue is related to memory leaks in the privoxy software. Specifically, memory leaks occur when a response is buffered and the buffer limit is reached or privoxy is running out of memory. Additionally, there are memory leaks in the show-status CGI handler when no action files or filter files are configured. The issue also involves an unlikely dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests is enabled and Privoxy fails to get the request destination from the Host header and a memory allocation fails.
Recommendations:
Update to version 3.0.29 to fix the memory leaks and other issues. As a temporary workaround, consider disabling the CGI handlers or restricting the use of the affected features until the update is applied.
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾