Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via unspecified vectors.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a     denial of service (segmentation fault or memory consumption) via unspecified vectors. (CVE-2015-1381)

Note that Nessus relies on the presence of the package as reported by the vendor.

Privoxy Developers reports :

Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled (the default) they could previously cause Privoxy to abort(). Reported by Matthew Daley. CVE-2015-1380.

Fixed multiple segmentation faults and memory leaks in the pcrs code.
This fix also increases the chances that an invalid pcrs command is rejected as such. Previously some invalid commands would be loaded without error. Note that Privoxy's pcrs sources (action and filter files) are considered trustworthy input and should not be writable by untrusted third-parties. CVE-2015-1381.

Fixed an 'invalid read' bug which could at least theoretically cause Privoxy to crash. So far, no crashes have been observed.
CVE-2015-1382.

Several vulnerabilities have been fixed in privoxy, a privacy enhancing HTTP proxy :

CVE-2015-1031, CID66394 :

unmap(): Prevent use-after-free if the map only consists of one item.

CVE-2015-1031, CID66376 and CID66391 :

pcrs_execute(): Consistently set *result to NULL in case of errors.
Should make use-after-free in the caller less likely.

CVE-2015-1381 :

Fix multiple segmentation faults and memory leaks in the pcrs code.

CVE-2015-1382 :

Fix invalid read to prevent potential crashes.

We recommend that you upgrade your privoxy packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the version of Privoxy running on the remote host is prior to 3.0.23. It is, therefore, potentially affected by multiple denial of service vulnerabilities :

  - A flaw exists in the chunked_body_is_complete() function     in 'jcc.c' due to improper processing of invalid     chunk-encoded bodies. A remote attacker, using a     specially crafted client request, can cause the Privoxy     instance to abort. (CVE-2015-1380)

  - Multiple flaws exist in the pcrs_compile_replacement()     function in 'pcrs.c' when handling backreferences.
    Remote attackers can exploit these flaws to cause a     segmentation fault or memory consumption.
    (CVE-2015-1381)

  - An invalid read flaw in 'parsers.c' allows a remote     attacker, via an HTTP request with a specially-crafted     time header, to cause a denial of service condition.
    (CVE-2015-1382)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

privoxy was updated to version 3.0.23 to fix three security issues.

These security issues were fixed :

  - Fixed a DoS issue in case of client requests with     incorrect chunk-encoded body. When compiled with     assertions enabled (the default) they could previously     cause Privoxy to abort() (CVE-2015-1380).

  - Fixed multiple segmentation faults and memory leaks in     the pcrs code. This fix also increases the chances that     an invalid pcrs command is rejected as such     (CVE-2015-1381).

  - Client requests with body that can't be delivered no     longer cause pipelined requests behind them to be     rejected as invalid (CVE-2015-1382).

Multiple vulnerabilities were discovered in Privoxy, a privacy enhancing HTTP proxy, which might result in denial of service.

ID	Name	Product	Family	Type	Severity
218547	Linux Distros Unpatched Vulnerability : CVE-2015-1381	Nessus	Misc.	Local	high
88153	FreeBSD : privoxy -- multiple vulnerabilities (d9e1b569-c3d8-11e5-b5fe-002590263bf5)	Nessus	FreeBSD Local Security Checks	Local	medium
82125	Debian DLA-142-1 : privoxy security update	Nessus	Debian Local Security Checks	Local	high
81516	Privoxy < 3.0.23 Multiple DoS Vulnerabilities	Nessus	Firewalls	Remote	medium
81241	openSUSE Security Update : privoxy (openSUSE-2015-115)	Nessus	SuSE Local Security Checks	Local	medium
81109	Debian DSA-3145-1 : privoxy - security update	Nessus	Debian Local Security Checks	Local	medium

Detections

Analytics

CVE-2015-1381

high

Tenable Plugins

high

medium

high

medium

medium

medium