CVE-2012-3505: Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumptio...

Security readout for executives and security teams

CVE-2012-3505 is a denial-of-service issue in Tinyproxy 1.8.3 and earlier. A remote attacker could make the proxy consume excessive CPU and memory, potentially making proxy service unavailable. The bundle provides no CVSS score and no evidence of active exploitation. Exposure is most likely where legacy Tinyproxy deployments are reachable by untrusted clients or the internet. Internal-only deployments still matter if many users or services depend on the proxy for outbound access. Prioritize remediation for internet-facing or business-critical proxy services. The issue is not shown as actively exploited, but successful abuse can disrupt connectivity and dependent operations. Mitigation focus: Identify any Tinyproxy versions 1.8.3 or earlier.; Apply vendor or distribution updates addressing CVE-2012-3505.; Restrict Tinyproxy access to trusted networks and authenticated users..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.