Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2024:0119-1

Опубликовано: 10 мая 2024
Источник: suse-cvrf

Описание

Security update for tinyproxy

This update for tinyproxy fixes the following issues:

  • Update to release 1.11.2

    • Fix potential use-after-free in header handling [CVE-2023-49606, boo#1223746]
    • Prevent junk from showing up in error page in invalid requests [CVE-2022-40468, CVE-2023-40533, boo#1223743]

  • Move tinyproxy program to /usr/bin.

  • Update to release 1.11.1

    • New fnmatch based filtertype

  • Update to release 1.11

    • Support for multiple bind directives.

  • update to 1.10.0:

    • Configuration file has moved from /etc/tinyproxy.conf to /etc/tinyproxy/tinyproxy.conf.
    • Add support for basic HTTP authentication
    • Add socks upstream support
    • Log to stdout if no logfile is specified
    • Activate reverse proxy by default
    • Support bind with transparent mode
    • Allow multiple listen statements in the configuration
    • Fix CVE-2017-11747: Create PID file before dropping privileges.
    • Fix CVE-2012-3505: algorithmic complexity DoS in hashmap
    • Bugfixes
    • BB#110: fix algorithmic complexity DoS in hashmap
    • BB#106: fix CONNECT requests with IPv6 literal addresses as host
    • BB#116: fix invalid free for GET requests to ipv6 literal address
    • BB#115: Drop supplementary groups
    • BB#109: Fix crash (infinite loop) when writing to log file fails
    • BB#74: Create log and pid files after we drop privs
    • BB#83: Use output of id instead of $USER

Список пакетов

SUSE Package Hub 15 SP5
tinyproxy-1.11.2-bp155.3.3.1
openSUSE Leap 15.5
tinyproxy-1.11.2-bp155.3.3.1

Ссылки

Описание

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably. bucket.

Затронутые продукты
SUSE Package Hub 15 SP5:tinyproxy-1.11.2-bp155.3.3.1
openSUSE Leap 15.5:tinyproxy-1.11.2-bp155.3.3.1
Ссылки

Описание

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a "kill `cat /run/tinyproxy/tinyproxy.pid`" command.

Затронутые продукты
SUSE Package Hub 15 SP5:tinyproxy-1.11.2-bp155.3.3.1
openSUSE Leap 15.5:tinyproxy-1.11.2-bp155.3.3.1
Ссылки

Описание

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.

Затронутые продукты
SUSE Package Hub 15 SP5:tinyproxy-1.11.2-bp155.3.3.1
openSUSE Leap 15.5:tinyproxy-1.11.2-bp155.3.3.1
Ссылки

Описание

** REJECT ** This CVE ID is a duplicate of CVE-2022-40468

Затронутые продукты
SUSE Package Hub 15 SP5:tinyproxy-1.11.2-bp155.3.3.1
openSUSE Leap 15.5:tinyproxy-1.11.2-bp155.3.3.1
Ссылки

Описание

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.

Затронутые продукты
SUSE Package Hub 15 SP5:tinyproxy-1.11.2-bp155.3.3.1
openSUSE Leap 15.5:tinyproxy-1.11.2-bp155.3.3.1
Ссылки