Privoxy CVE-2015-1381 Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	72354
Class:	Design Error
CVE:	CVE-2015-1381
Remote:	Yes
Local:	No
Published:	Jan 26 2015 12:00AM
Updated:	Feb 04 2015 12:03AM
Credit:	The vendor reported this issue.
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Privoxy CVE-2015-1381 Multiple Memory Corruption Vulnerabilities

Privoxy is prone to multiple memory-corruption vulnerabilities.

Attackers can exploit these issues to obtain sensitive information or cause denial-of-service condition. This may lead to further attacks.

Versions prior to Privoxy 3.0.23 are vulnerable.

Privoxy CVE-2015-1381 Multiple Memory Corruption Vulnerabilities

An attacker can exploit these issues using readily available commands and tools.

Privoxy CVE-2015-1381 Multiple Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Privoxy CVE-2015-1381 Multiple Memory Corruption Vulnerabilities

References:

• Privoxy Homepage (Privoxy)