CVE-2011-1843: Banu Tinyproxy

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers.

Affected products

• Banu Tinyproxy: up to and including 1.8.2; version 1.5.0 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.6.0 only; …

Published 2011-05-03. Last modified 2026-06-16.