parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time header.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1382
Reference (s):
- http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.197&view=markup
- http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c?r1=1.297&r2=1.298
- DEBIAN:DSA-3145
- URL: http://www.debian.org/security/2015/dsa-3145
- MLIST:[oss-security] 20150126 CVE request for Privoxy