CVE-2015-1030 – Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy b

Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests that are rejected because the socket limit is reached.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1030

Reference (s):

• http://www.privoxy.org/announce.txt
• MLIST:[oss-security] 20150110 Re: CVE Request for Privoxy Version: 3.0.22
• URL: http://www.openwall.com/lists/oss-security/2015/01/11/1
• SECUNIA:62123
• URL: http://secunia.com/advisories/62123