PatchTheCVEziproxy vulnerabilities and fixes
Recent CVEs affecting ziproxy, with upgrade or downgrade steps. 3 tracked.
ziproxy has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2010-06-21. Highest priority: CVE-2010-2350 (score 46/100).
- CVE-2010-2350 MEDIUM 6.8 DOWNGRADE Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of se
- CVE-2010-1513 MEDIUM 6.8 UPGRADE Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary
- CVE-2009-0804 MEDIUM 5.4 DOWNGRADE Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remot
FAQ
How do I fix ziproxy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ziproxy being exploited right now?
None of the tracked ziproxy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ziproxy CVE should I patch first?
CVE-2010-2350 currently ranks highest (46/100): Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of se.