Skip to content
Threat Feed
Subscribe

Tag

Tinyproxy

2 briefs RSS
high advisory

Tinyproxy HTTP Chunked Encoding Integer Overflow Denial of Service

An integer overflow vulnerability in Tinyproxy's HTTP chunked transfer encoding parser (versions <= 1.11.3) allows an unauthenticated remote attacker to cause a denial of service by sending a crafted chunk size that bypasses validation, leading to resource exhaustion.

tinyproxy denial-of-service integer-overflow cve-2026-3945
2r 1t
high advisory

Tinyproxy HTTP Request Parsing Desynchronization Vulnerability (CVE-2026-31842)

Tinyproxy versions 1.11.3 and earlier are vulnerable to HTTP request parsing desynchronization due to case-sensitive comparison of the Transfer-Encoding header, allowing unauthenticated remote attackers to cause denial of service or security control bypass by sending crafted requests.

Tinyproxy http desync denial-of-service CVE-2026-31842 linux
2r 4t 1c