Candidate: CVE-2015-1382 PublicDate: 2015-02-03 16:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1382 http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c?r1=1.297&r2=1.298 Description: parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time header. Ubuntu-Description: It was discovered that privoxy has multiple unspecified vulnerabilities. An attacker could use this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. Notes: Bugs: Priority: medium Discovered-by: Assigned-to: mikesalvatore CVSS: Patches_privoxy: upstream_privoxy: released (3.0.21-7) lucid_privoxy: ignored (reached end-of-life) precise_privoxy: ignored (reached end-of-life) precise/esm_privoxy: DNE (precise was needed) trusty_privoxy: released (3.0.21-7+debu1build0.14.04.1) trusty/esm_privoxy: released (3.0.21-7+debu1build0.14.04.1) utopic_privoxy: ignored (reached end-of-life) vivid_privoxy: ignored (reached end-of-life) vivid/stable-phone-overlay_privoxy: DNE vivid/ubuntu-core_privoxy: DNE wily_privoxy: ignored (reached end-of-life) xenial_privoxy: not-affected (3.0.24-1) yakkety_privoxy: not-affected (3.0.26-2) zesty_privoxy: not-affected artful_privoxy: not-affected bionic_privoxy: not-affected devel_privoxy: not-affected