VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 24, 2009· Updated Jun 16, 2026

CVE-2009-4413

CVE-2009-4413

Description

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Pps.jussieu/Polipo3 versions
    cpe:2.3:a:pps.jussieu:polipo:0.9.12:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:pps.jussieu:polipo:0.9.12:*:*:*:*:*:*:*
    • cpe:2.3:a:pps.jussieu:polipo:0.9.8:*:*:*:*:*:*:*
    • cpe:2.3:a:pps.jussieu:polipo:1.0.4:*:*:*:*:*:*:*
  • Polipo/Polipollm-fuzzy
    Range: 0.9.8, 0.9.12, 1.0.4
  • osv-coords
    pkg:deb/debian/polipo?arch=source
    Range: < 1.0.4-2

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.