Описание
The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | not-affected | |
| hardy | released | 1.0.4-1+lenny1build0.8.04.1 |
| intrepid | released | 1.0.4-1+lenny1build0.8.10.1 |
| jaunty | released | 1.0.4-1+lenny1build0.9.04.1 |
| karmic | not-affected | |
| upstream | released | 1.0.4-1.1 |
Показывать по
Ссылки на источники
5 Medium
CVSS2
Связанные уязвимости
The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault.
The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12 ...
The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault.
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
5 Medium
CVSS2