CVE catalog

CVE-2020-36420

UBUNTU-CVE-2020-36420

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.90% · Oct 25, 2026

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntupolipo16.041.1.1-7vulnerable
Ubuntupolipo18.041.1.1-7vulnerable
Ubuntupolipo18.041.1.1-8vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References