CVE

Id
88802  
CVE No.
CVE-2016-1983  
Status
Candidate  
Description
The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.  
Phase
Assigned (20160121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
772105 88802 CVE-2016-1983 MLIST:[oss-security] 20160121 CVE request for Privoxy 3.0.24  View
772106 88802 CVE-2016-1983 URL:http://www.openwall.com/lists/oss-security/2016/01/21/4  View
772107 88802 CVE-2016-1983 MLIST:[oss-security] 20160121 Re: CVE request for Privoxy 3.0.24  View
772108 88802 CVE-2016-1983 URL:http://www.openwall.com/lists/oss-security/2016/01/22/3  View
772109 88802 CVE-2016-1983 CONFIRM:http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c?r1=1.302&r2=1.303  View
772110 88802 CVE-2016-1983 CONFIRM:http://www.privoxy.org/announce.txt  View
772111 88802 CVE-2016-1983 DEBIAN:DSA-3460  View
772112 88802 CVE-2016-1983 URL:http://www.debian.org/security/2016/dsa-3460  View
772113 88802 CVE-2016-1983 FEDORA:FEDORA-2016-29995fbd42  View
772114 88802 CVE-2016-1983 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176475.html  View
772115 88802 CVE-2016-1983 FEDORA:FEDORA-2016-bc7acd24c6  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1969 JVNDB-2016-002742 複数の meteocontrol WEB"log 製品における重要な情報を取得される脆弱性 複数の meteocontrol WEB"log 製品は、"post-admin" ログインページの認証を要求しないため、重要な情報を取得される、またはデータを変更される脆弱性が存在します。 CVE-2016-2296 88802 7.5 9.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002742.html  View