Packages / Debian 12 (Bookworm) / Source / web / tinyproxy
Lightweight, non-caching, optionally anonymizing HTTP proxy (executable only)
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-54387] Published: Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend while using Content-Len | Critical(9.3) | AffectedDetails (6)
|
| [CVE-2026-55202] Published: Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access the stats page by injecting a matc | Critical(9.1) | AffectedDetails (6)
|
| [CVE-2026-31842] Published: Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The is_chunked_transfer() function us | High(8.7) | AffectedDetails (6)
|
| [CVE-2026-3945] Published: An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service (D | High(8.7) | AffectedDetails (6)
|
| [CVE-2025-63938] Published: tinyproxy: CVE-2025-63938 | Medium(6.5) | AffectedDetails (6)
|
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-54388] Published: Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing values, forwarding all duplicate headers to the backend while usin | Critical(9.3) | Not affectedDetails (6)
|
| [CVE-2022-40468] Published: tinyproxy: CVE-2022-40468 | High(7.5) | FixedDetails (6)
|
| [CVE-2017-11747] Published: tinyproxy: CVE-2017-11747 | Medium(5.5) | FixedDetails (6)
|
| [CVE-2012-3505] Published: tinyproxy: CVE-2012-3505 | Medium | FixedDetails (6)
|
| [CVE-2011-1843] Published: tinyproxy: CVE-2011-1843 | Low | FixedDetails (6)
|
| [CVE-2011-1499] Published: tinyproxy: CVE-2011-1499 | Medium | FixedDetails (6)
|
| [CVE-2002-0847] Published: tinyproxy: CVE-2002-0847 | Medium | FixedDetails (6)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Authoritative source; repository metadata signature verified
bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Authoritative source; repository metadata signature verified
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Authoritative source; repository metadata signature verified
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14