Log in Start free

Vulnerability · Published May 1, 2024 · Assigned by talos

CVE-2023-49606

Critical 9.8

In plain English

A critical-severity use-after-free in Tinyproxy from Tinyproxy. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 63.1% (higher than 99.2% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)63.1%top 0.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC

Official description

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20tinyproxy1.11.2-r0ALPINE-CVE-2023-49606
Alpine:v3.21tinyproxy1.11.2-r0ALPINE-CVE-2023-49606
Alpine:v3.22tinyproxy1.11.2-r0ALPINE-CVE-2023-49606
Alpine:v3.23tinyproxy1.11.2-r0ALPINE-CVE-2023-49606
Alpine:v3.24tinyproxy1.11.2-r0ALPINE-CVE-2023-49606
Debian:12tinyproxy1.11.1-2.1+deb12u1DSA-5705-1
Debian:12tinyproxy1.11.1-2.1+deb12u1DEBIAN-CVE-2023-49606
Debian:13tinyproxy1.11.1-4DEBIAN-CVE-2023-49606
Debian:14tinyproxy1.11.1-4DEBIAN-CVE-2023-49606
Ubuntu:24.04:LTStinyproxy1.11.1-3ubuntu0.1USN-7190-1
Ubuntu:24.04:LTStinyproxy1.11.1-3ubuntu0.1UBUNTU-CVE-2023-49606
Ubuntu:25.10tinyproxy1.11.2-1UBUNTU-CVE-2023-49606
Ubuntu:26.04:LTStinyproxy1.11.2-1UBUNTU-CVE-2023-49606

Affected products (as reported)

VendorProductVersions
Tinyproxy Tinyproxy 1.11.1Tinyproxy 1.10.0

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References