CVE-2023-49606

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://www.openwall.com/lists/oss-security/2024/05/07/1	Mailing List Exploit Patch Third Party Advisory Issue Tracking
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889	Exploit Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/05/07/1	Mailing List Exploit Patch Third Party Advisory Issue Tracking
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tinyproxy_project:tinyproxy:1.10.0:::::::*
	cpe:2.3:a:tinyproxy_project:tinyproxy:1.11.1:::::::*

History

22 Aug 2025, 14:44

Type	Values Removed	Values Added
References	~~() http://www.openwall.com/lists/oss-security/2024/05/07/1 -~~	() http://www.openwall.com/lists/oss-security/2024/05/07/1 - Mailing List, Exploit, Patch, Third Party Advisory, Issue Tracking
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889 -~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889 - Exploit, Third Party Advisory
First Time		Tinyproxy Project Tinyproxy Project tinyproxy
CPE		cpe:2.3:a:tinyproxy_project:tinyproxy:1.11.1:::::::* cpe:2.3:a:tinyproxy_project:tinyproxy:1.10.0:::::::*

Information

Published : 2024-05-01 16:15

Updated : 2025-08-22 14:44

NVD link : CVE-2023-49606

Mitre link : CVE-2023-49606

CVE.ORG link : CVE-2023-49606

JSON object : View

Products Affected

tinyproxy_project

tinyproxy

CWE

CWE-416

Use After Free

{"id": "CVE-2023-49606", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-05-01T16:15:07.257", "references": [{"url": "http://www.openwall.com/lists/oss-security/2024/05/07/1", "tags": ["Mailing List", "Exploit", "Patch", "Third Party Advisory", "Issue Tracking"], "source": "talos-cna@cisco.com"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/07/1", "tags": ["Mailing List", "Exploit", "Patch", "Third Party Advisory", "Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de use-after-free en el an\u00e1lisis de los encabezados de conexi\u00f3n HTTP en Tinyproxy 1.11.1 y Tinyproxy 1.10.0. Un encabezado HTTP especialmente manipulado puede provocar la reutilizaci\u00f3n de la memoria previamente liberada, lo que provoca da\u00f1os en la memoria y podr\u00eda provocar la ejecuci\u00f3n remota de c\u00f3digo. Un atacante necesita realizar una solicitud HTTP no autenticada para activar esta vulnerabilidad."}], "lastModified": "2025-08-22T14:44:51.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tinyproxy_project:tinyproxy:1.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2491C198-67C7-4A44-85F9-91E9C05E7666"}, {"criteria": "cpe:2.3:a:tinyproxy_project:tinyproxy:1.11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEF3B8A0-8123-4877-B93C-5D8C50C2DA55"}], "operator": "OR"}]}], "sourceIdentifier": "talos-cna@cisco.com"}