Vulnerabilities (CVE)

Filtered by vendor Polipo Project Subscribe
Filtered by product Polipo
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-36420 1 Polipo Project 1 Polipo 2024-08-04 4.3 MEDIUM 7.5 HIGH
** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2021-38614 1 Polipo Project 1 Polipo 2024-08-04 5.0 MEDIUM 7.5 HIGH
** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1, when NDEBUG is used, allows a heap-based buffer overflow during parsing of a Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2011-3596 2 Debian, Polipo Project 2 Debian Linux, Polipo 2024-02-04 5.0 MEDIUM 7.5 HIGH
Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.