CVE-2023-49606

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-49606", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2023-12-05T17:05:52.210Z", "datePublished": "2024-05-01T15:31:01.499Z", "dateUpdated": "2025-11-04T17:13:21.882Z"}, "containers": {"cna": {"affected": [{"vendor": "Tinyproxy", "product": "Tinyproxy", "versions": [{"version": "1.11.1", "status": "affected"}, {"version": "Tinyproxy 1.10.0", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-416: Use After Free", "type": "CWE", "cweId": "CWE-416"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2024-05-07T12:06:03.439Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889"}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/07/1"}], "credits": [{"lang": "en", "value": "Discovered by Dimitrios Tatsis of Cisco Talos."}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-49606", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-08T13:44:20.408622Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:tinyproxy:tinyproxy:1.10.0:*:*:*:*:*:*:*"], "vendor": "tinyproxy", "product": "tinyproxy", "versions": [{"status": "affected", "version": "1.10.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:tinyproxy:tinyproxy:1.11.1:*:*:*:*:*:*:*"], "vendor": "tinyproxy", "product": "tinyproxy", "versions": [{"status": "affected", "version": "1.11.1"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:27:48.362Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "tags": ["x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/07/1", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00035.html"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1889"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-04T17:13:21.882Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "tags": ["x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/07/1", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00035.html"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1889"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-04T17:13:21.882Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-49606", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-08T13:44:20.408622Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:tinyproxy:tinyproxy:1.10.0:*:*:*:*:*:*:*"], "vendor": "tinyproxy", "product": "tinyproxy", "versions": [{"status": "affected", "version": "1.10.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:tinyproxy:tinyproxy:1.11.1:*:*:*:*:*:*:*"], "vendor": "tinyproxy", "product": "tinyproxy", "versions": [{"status": "affected", "version": "1.11.1"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-06T15:21:03.272Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"credits": [{"lang": "en", "value": "Discovered by Dimitrios Tatsis of Cisco Talos."}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Tinyproxy", "product": "Tinyproxy", "versions": [{"status": "affected", "version": "1.11.1"}, {"status": "affected", "version": "Tinyproxy 1.10.0"}]}], "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889"}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/07/1"}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416: Use After Free"}]}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2024-05-07T12:06:03.439Z"}}}, "cveMetadata": {"cveId": "CVE-2023-49606", "state": "PUBLISHED", "dateUpdated": "2025-11-04T17:13:21.882Z", "dateReserved": "2023-12-05T17:05:52.210Z", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "datePublished": "2024-05-01T15:31:01.499Z", "assignerShortName": "talos"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Tinyproxy", "vendor": "Tinyproxy", "versions": [{"status": "affected", "version": "1.11.1"}, {"status": "affected", "version": "Tinyproxy 1.10.0"}]}], "source": "talos-cna@cisco.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:tinyproxy:tinyproxy:1.10.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "tinyproxy", "vendor": "tinyproxy", "versions": [{"status": "affected", "version": "1.10.0"}]}, {"cpes": ["cpe:2.3:a:tinyproxy:tinyproxy:1.11.1:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "tinyproxy", "vendor": "tinyproxy", "versions": [{"status": "affected", "version": "1.11.1"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tinyproxy_project:tinyproxy:1.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "2491C198-67C7-4A44-85F9-91E9C05E7666", "vulnerable": true}, {"criteria": "cpe:2.3:a:tinyproxy_project:tinyproxy:1.11.1:*:*:*:*:*:*:*", "matchCriteriaId": "EEF3B8A0-8123-4877-B93C-5D8C50C2DA55", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de use-after-free en el an\u00e1lisis de los encabezados de conexi\u00f3n HTTP en Tinyproxy 1.11.1 y Tinyproxy 1.10.0. Un encabezado HTTP especialmente manipulado puede provocar la reutilizaci\u00f3n de la memoria previamente liberada, lo que provoca da\u00f1os en la memoria y podr\u00eda provocar la ejecuci\u00f3n remota de c\u00f3digo. Un atacante necesita realizar una solicitud HTTP no autenticada para activar esta vulnerabilidad."}], "id": "CVE-2023-49606", "lastModified": "2026-06-17T06:36:13.757", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "talos-cna@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-49606", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2024-05-08T13:44:20.408622Z", "version": "2.0.3"}}]}, "published": "2024-05-01T16:15:07.257", "references": [{"source": "talos-cna@cisco.com", "tags": ["Exploit", "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2024/05/07/1"}, {"source": "talos-cna@cisco.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2024/05/07/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00035.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1889"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "talos-cna@cisco.com", "type": "Secondary"}]}

{}

{"created": "2025-07-12T22:31:49.664228+00:00", "updated": "2025-07-12T22:31:49.664323+00:00", "vendors": ["tinyproxy", "tinyproxy$PRODUCT$tinyproxy"]}