Vulnerability CVE-2022-40468
Published: 2022-09-19

Description:
Tinyproxy commit 84f203f and earlier does not process HTTP request lines in the process_request() function and is using uninitialized buffers. This vulnerability allows attackers to access sensitive information at system runtime.

 References:
https://github.com/tinyproxy/tinyproxy
https://github.com/tinyproxy/tinyproxy/issues/457
https://github.com/tinyproxy/tinyproxy/blob/84f203fb1c4733608c7283bbe794005a469c4b00/src/reqs.c#L346
Copyright 2026, cxsecurity.com

 

Back to Top