Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in http_parse.c, and possibly other unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pps.Jussieu Polipo服务器超长HTTP头远程拒绝服务漏洞
Vulnerability Description
Polipo是一个小型的代理服务器软件。 Polipo的client.c文件中的httpClientDiscardBody()函数中存在符号错误，远程攻击者可以通过提交带有超长Content-Length头的HTTP请求导致服务崩溃；此外http_parse.c的httpParseHeaders()函数没有正确地解析某些Cache-Control头，发送畸形的HTTP请求也可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A