Vulnerability · Published Mar 30, 2026 · Assigned by TuranSec
CVE-2026-3945tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service
High 7.5
In plain English
A high-severity integer overflow in tinyproxy from tinyproxy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 51.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service (DoS). The issue occurs because chunk size values are parsed using strtol without properly validating overflow conditions (e.g., errno == ERANGE).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | tinyproxy | no fix listed | DEBIAN-CVE-2026-3945 |
| Debian:13 | tinyproxy | no fix listed | DEBIAN-CVE-2026-3945 |
| Debian:14 | tinyproxy | no fix listed | DEBIAN-CVE-2026-3945 |
| Ubuntu:24.04:LTS | tinyproxy | no fix listed | UBUNTU-CVE-2026-3945 |
| Ubuntu:25.10 | tinyproxy | no fix listed | UBUNTU-CVE-2026-3945 |
| Ubuntu:26.04:LTS | tinyproxy | no fix listed | UBUNTU-CVE-2026-3945 |
| Ubuntu:26.10 | tinyproxy | no fix listed | UBUNTU-CVE-2026-3945 |
Affected products (as reported)
Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://github.com/tinyproxy/tinyproxy/issues/602 issue-tracking, technical-description
- https://github.com/tinyproxy/tinyproxy/pull/603 patch
- https://github.com/tinyproxy/tinyproxy/commit/969852c patch
- https://github.com/tinyproxy/tinyproxy/commit/bb7edc4 patch
- https://github.com/tinyproxy/tinyproxy/releases release-notes