CVE-2016-1983

概要

参考情報

• ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c
• lists.fedoraproject.org/pipermail/package-announce/2016-February/176475.html
• lists.fedoraproject.org/pipermail/package-announce/2016-February/176492.html
• debian.org/security/2016/dsa-3460
• openwall.com/lists/oss-security/2016/01/21/4
• openwall.com/lists/oss-security/2016/01/22/3
• privoxy.org/announce.txt · Vendor Advisory

privoxy のその他の脆弱性

• CVE-2021-44543中 6.1An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured …
• CVE-2021-44542高 7.5A memory leak vulnerability was found in Privoxy when handling errors.
• CVE-2021-44541高 7.5A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the…
• CVE-2021-44540高 7.5A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.
• CVE-2021-20209高 7.5A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.