https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:11:42.509336+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-11747 CVE-2017-11747 2026-10-06T20:11:42.511148+00:00

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a "kill `cat /run/tinyproxy/tinyproxy.pid`" command.

 https://cve.radiocsirt.org/vuln/usn-4808-1 USN-4808-1 — tinyproxy vulnerability 2026-10-06T20:11:42.511205+00:00

Affected: Ubuntu:Pro:14.04:LTS: tinyproxy, Ubuntu:Pro:16.04:LTS: tinyproxy, Ubuntu:Pro:18.04:LTS: tinyproxy

It was discovered that Tinyproxy created its pid file with insecure permissions. An attacker could use the vulnerability to cause arbitrary processes to be killed, resulting in a denial of service.