Summary
USN-7140-1 fixed CVE-2022-40468 in tinyproxy. This update provides the
corresponding update for Ubuntu 14.04 LTS.
Original advisory details:
It was discovered that Tinyproxy did not properly manage memory under
certain circumstances. An attacker could possibly use this issue to leak
left-over heap data if custom error page templates containing special
non-standard variables are used.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | tinyproxy | 1.8.3-3ubuntu14.04.1~esm2 |
Vulnerabilities 1
-
Unscored —
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used…
References
-
report
https://ubuntu.com/security/CVE-2022-40468