Skip to content
OpenAdvisories
Unscored DSA-2002-1 2 CVEs

polipo - denial of service

Published Feb 19, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 polipo 1.0.4-1+lenny1

Vulnerabilities 2

  • Unscored —
    CVE-2009-3305 Public exploit EPSS 10%

    Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request w…

  • Unscored —
    CVE-2009-4413 Public exploit

    The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remo…