CVE-2002-0847: High severity tinyproxy tinyproxy vulnerability
Published Aug 12, 2002
·Updated
tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).
Affected Software
4 affected componentsFixes available
debian/tinyproxy
1.10.0-2+deb10u11.10.0-51.11.1-2.11.11.1-3
tinyproxy tinyproxy=1.4.3
tinyproxy tinyproxy=1.3.3
tinyproxy tinyproxy=1.3.2
Remediation
Patch Available
Patch Available
Event History
Aug 12, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0847?
CVE-2002-0847 has a high severity level due to the potential for remote code execution.
2
How do I fix CVE-2002-0847?
To mitigate CVE-2002-0847, upgrade to a fixed version of tinyproxy, specifically versions 1.10.0-2+deb10u1 or later.
3
Which versions of tinyproxy are affected by CVE-2002-0847?
CVE-2002-0847 affects tinyproxy versions 1.4.3 and earlier, including 1.3.2 and 1.3.3.
4
Can CVE-2002-0847 be exploited remotely?
Yes, CVE-2002-0847 can be exploited remotely by attackers to execute arbitrary code.
5
What is the cause of CVE-2002-0847?
CVE-2002-0847 is caused by a double-free vulnerability in the memory management of tinyproxy.