Description
Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers.
References (3)
Core 3
Core References
Patch x_refsource_confirm
https://banu.com/cgit/tinyproxy/diff/?id=97b9984484299b2ce72f8f4fc3706dab8a3a8439
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/47715
Exploit, Patch x_refsource_confirm
https://banu.com/bugzilla/show_bug.cgi?id=90
Scores
EPSS
0.0134
EPSS Percentile
68.4%
Details
CWE
CWE-189
Status
published
Products (14)
banu/tinyproxy
1.5.0 (16 CPE variants)
banu/tinyproxy
1.5.1 (11 CPE variants)
banu/tinyproxy
1.5.2 (3 CPE variants)
banu/tinyproxy
1.5.3 (2 CPE variants)
banu/tinyproxy
1.6.0 (9 CPE variants)
banu/tinyproxy
1.6.1
banu/tinyproxy
1.6.2
banu/tinyproxy
1.6.3
banu/tinyproxy
1.6.4
banu/tinyproxy
1.6.5
... and 4 more
Published
May 03, 2011
Tracked Since
Feb 18, 2026