CVE-2022-40468

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used

published September 19, 2022

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01897 · 79.4th percentile
Published
2022-09-19T00:00Z
EPSS history
Timeline
  • 19 SEP 00:00Z
    Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used
    cvelistv5