CVE-2012-3505 — Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably

Back Back to CVE browser

MEDIUM

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably

Published Oct 9, 2012

5.0

MEDIUM

CVSS 2.0

EPSS 7.35%

Description

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably. bucket.

Affected products

Remediation

No remediation recorded yet.

Metrics

7.35% 0.07349

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.07349

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (51 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	7.35% (0.07349)	94.22th	v5 (v2026.06.15)
Jun 15, 2026	7.35% (0.07349)	93.58th	v5 (v2026.06.15)
May 6, 2026	5.17% (0.05172)	89.95th	v4 (v2025.03.14)
Mar 4, 2026	3.36% (0.03355)	87.10th	v4 (v2025.03.14)
Mar 1, 2026	1.01% (0.01010)	76.90th	v4 (v2025.03.14)
Feb 4, 2026	3.36% (0.03355)	87.02th	v4 (v2025.03.14)
Feb 1, 2026	1.01% (0.01010)	76.77th	v4 (v2025.03.14)
Jan 4, 2026	3.36% (0.03355)	86.96th	v4 (v2025.03.14)
Jan 1, 2026	1.01% (0.01010)	76.70th	v4 (v2025.03.14)
Dec 4, 2025	3.36% (0.03355)	86.89th	v4 (v2025.03.14)
Dec 1, 2025	1.01% (0.01010)	76.53th	v4 (v2025.03.14)
Nov 4, 2025	3.36% (0.03355)	86.81th	v4 (v2025.03.14)
Nov 1, 2025	1.01% (0.01010)	76.50th	v4 (v2025.03.14)
Oct 4, 2025	3.36% (0.03355)	86.83th	v4 (v2025.03.14)
Oct 1, 2025	1.01% (0.01010)	76.41th	v4 (v2025.03.14)
Sep 4, 2025	3.36% (0.03355)	86.86th	v4 (v2025.03.14)
Sep 1, 2025	1.01% (0.01010)	76.31th	v4 (v2025.03.14)
Aug 4, 2025	3.36% (0.03355)	86.87th	v4 (v2025.03.14)
Aug 1, 2025	1.01% (0.01010)	76.27th	v4 (v2025.03.14)
Jul 4, 2025	3.36% (0.03355)	86.81th	v4 (v2025.03.14)
Jul 1, 2025	1.01% (0.01010)	76.17th	v4 (v2025.03.14)
Jun 24, 2025	3.36% (0.03355)	86.77th	v4 (v2025.03.14)
Jun 21, 2025	1.01% (0.01010)	76.07th	v4 (v2025.03.14)
Jun 19, 2025	3.36% (0.03355)	86.76th	v4 (v2025.03.14)
Jun 18, 2025	4.73% (0.04727)	88.90th	v4 (v2025.03.14)
Jun 5, 2025	6.71% (0.06705)	90.75th	v4 (v2025.03.14)
Jun 1, 2025	1.80% (0.01795)	81.91th	v4 (v2025.03.14)
May 4, 2025	6.71% (0.06705)	90.72th	v4 (v2025.03.14)
May 1, 2025	1.80% (0.01795)	81.82th	v4 (v2025.03.14)
Apr 20, 2025	6.71% (0.06705)	90.72th	v4 (v2025.03.14)
Apr 19, 2025	1.80% (0.01795)	81.74th	v4 (v2025.03.14)
Apr 6, 2025	6.71% (0.06705)	90.39th	v4 (v2025.03.14)
Apr 5, 2025	1.80% (0.01795)	81.22th	v4 (v2025.03.14)
Apr 3, 2025	6.71% (0.06705)	90.37th	v4 (v2025.03.14)
Apr 2, 2025	1.80% (0.01795)	81.19th	v4 (v2025.03.14)
Apr 1, 2025	6.71% (0.06705)	90.37th	v4 (v2025.03.14)
Mar 31, 2025	1.80% (0.01795)	81.14th	v4 (v2025.03.14)
Mar 30, 2025	6.71% (0.06705)	90.34th	v4 (v2025.03.14)
Mar 29, 2025	13.26% (0.13257)	90.24th	v4 (v2025.03.14)
Mar 28, 2025	6.71% (0.06705)	90.36th	v4 (v2025.03.14)
Mar 27, 2025	1.80% (0.01795)	80.61th	v4 (v2025.03.14)
Mar 23, 2025	6.71% (0.06705)	89.67th	v4 (v2025.03.14)
Mar 22, 2025	1.80% (0.01795)	81.22th	v4 (v2025.03.14)
Mar 19, 2025	6.71% (0.06705)	90.09th	v4 (v2025.03.14)
Mar 18, 2025	1.80% (0.01795)	81.58th	v4 (v2025.03.14)
Mar 17, 2025	6.71% (0.06705)	90.56th	v4 (v2025.03.14)
Dec 12, 2024	2.13% (0.02128)	89.65th	v3 (v2023.03.01)
Mar 7, 2023	2.13% (0.02128)	87.44th	v3 (v2023.03.01)
Mar 6, 2023	2.17% (0.02172)	80.77th	v2 (v2022.01.01)
Apr 1, 2022	2.17% (0.02172)	78.91th	v2 (v2022.01.01)
Feb 4, 2022	2.17% (0.02172)	57.73th	v2 (v2022.01.01)

Weaknesses (1)

CWE-310

References (10)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685281
x_refsource_MISC
http://secunia.com/advisories/50278
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/51074
third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2564
vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2012/08/17/3
mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2012/08/18/1
mailing-listx_refsource_MLIST
http://www.securitytracker.com/id?1027412
vdb-entryx_refsource_SECTRACK
https://banu.com/bugzilla/show_bug.cgi?id=110
x_refsource_MISC
https://banu.com/bugzilla/show_bug.cgi?id=110#c2
x_refsource_CONFIRM
https://bugs.launchpad.net/ubuntu/+source/tinyproxy/+bug/1036985
x_refsource_CONFIRM

Link	Providers	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685281		x_refsource_MISC
http://secunia.com/advisories/50278		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/51074		third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2564		vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2012/08/17/3		mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2012/08/18/1		mailing-listx_refsource_MLIST
http://www.securitytracker.com/id?1027412		vdb-entryx_refsource_SECTRACK
https://banu.com/bugzilla/show_bug.cgi?id=110		x_refsource_MISC
https://banu.com/bugzilla/show_bug.cgi?id=110#c2		x_refsource_CONFIRM
https://bugs.launchpad.net/ubuntu/+source/tinyproxy/+bug/1036985		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Oct 9, 2012

Updated Aug 6, 2024

Reserved Jun 14, 2012

Link CVE-2012-3505

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2012-3505

Red Hat

Severity n/a

Public date n/a

Links CVE-2012-3505