Tinyproxy & amp; #39; conf. c & amp; #39; integer overflow Security Bypass Vulnerability and repair

Affected Versions:
Banu Systems Private Limited Tinyproxy 1.8.2

Vulnerability description:

Tinyproxy is a small GPL-based HTTP/SSL Proxy program.
Tinyproxy has an error in the implementation of subnet mask generation. When the configuration allows network segments (for example, "Allow 192.168.0.0/24" is opposite to the default "Allow 127.0.0.1 "), any IP address is allowed to be connected, making it an open proxy.
This happens if one or more Allow statements using IP segments are configured.

<* Reference
Https://banu.com/bugzilla/show_bug.cgi? Id = 90
*>

Vendor solutions
Tinyproxy 1.8.3 has fixed this vulnerability. We recommend that you download the vulnerability:
Https://banu.com/tinyproxy/