USN-7190-1: Tinyproxy vulnerability
Published Jan 8, 2025
·Updated
It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this issue to cause a DoS or possibly execute arbitrary code.
Affected Software
20 affected componentsFixes available
All of the following
ubuntu/tinyproxy<1.11.1-3ubuntu0.1
1.11.1-3ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/tinyproxy-bin<1.11.1-3ubuntu0.1
1.11.1-3ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/tinyproxy<1.11.0-1ubuntu0.1~esm2
1.11.0-1ubuntu0.1~esm2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/tinyproxy-bin<1.11.0-1ubuntu0.1~esm2
1.11.0-1ubuntu0.1~esm2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/tinyproxy<1.10.0-4ubuntu0.2
1.10.0-4ubuntu0.2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/tinyproxy-bin<1.10.0-4ubuntu0.2
1.10.0-4ubuntu0.2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/tinyproxy<1.8.4-5ubuntu0.1~esm3
1.8.4-5ubuntu0.1~esm3
Ubuntu Ubuntu=18.04
All of the following
ubuntu/tinyproxy-bin<1.8.4-5ubuntu0.1~esm3
1.8.4-5ubuntu0.1~esm3
Ubuntu Ubuntu=18.04
All of the following
ubuntu/tinyproxy<1.8.3-3ubuntu16.04.1~esm3
1.8.3-3ubuntu16.04.1~esm3
Ubuntu Ubuntu=16.04
All of the following
ubuntu/tinyproxy<1.8.3-3ubuntu14.04.1~esm3
1.8.3-3ubuntu14.04.1~esm3
Ubuntu Ubuntu=14.04
Event History
Jan 8, 2025
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7190-1?
The severity of USN-7190-1 is high due to potential denial of service and arbitrary code execution risks.
2
How do I fix USN-7190-1?
To fix USN-7190-1, upgrade Tinyproxy to version 1.11.1-3ubuntu0.1 or higher for Ubuntu 24.04.
3
What vulnerabilities are addressed in USN-7190-1?
USN-7190-1 addresses a memory management vulnerability in Tinyproxy during HTTP header parsing.
4
Which versions of Ubuntu are affected by USN-7190-1?
USN-7190-1 affects Ubuntu versions 18.04, 20.04, 22.04, and 24.04 with specific Tinyproxy versions.
5
Is USN-7190-1 related to CVE-2023-49606?
Yes, USN-7190-1 is related to CVE-2023-49606 which is the identifier for the vulnerability addressed.