| Package | Affected versions | Patched versions |
|---|---|---|
| cvs | = 1.11= 1.12 |
Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free