Unscored severity · published Feb 3, 2015
CVE-2015-1380
jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body
–
CVSS
3.4%
EPSS
No
On KEV
Description
jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensuse · Opensuse
13.1; 13.2 · source: NVD
PR
Privoxy · Privoxy
through 3.0.22 · source: NVD
SO
Solaris · Oracle
11.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1380
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1380
Release Notes
http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.197&view=markup
Broken Link
http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/currentjcc.c/?r1=1.433&r2=1.434
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00031.html
Permissions Required
http://secunia.com/advisories/62899
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/26/4
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/27/20
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability