Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libproxy | Aug 30, 2017 | Nov 11, 2012 |
| Freebsd | — | Upgrade libproxyUpgrade libproxy-kdeUpgrade libproxy-perlUpgrade libproxy-webkitUpgrade libproxy-gnome | Dec 10, 2025 | Jan 17, 2016 |
| Gentoo Linux | — | Upgrade net-libs/libproxy. | Oct 30, 2017 | Nov 11, 2012 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade library/libproxy/libproxy-gnome to version 0.3.1-0.175.1.15.0.4.0 on Solaris 11.1 | May 29, 2017 | Nov 11, 2012 |
| Suse | — | Upgrade libproxy1-networkmanager-32bitUpgrade libproxy1-config-kdeUpgrade libproxy1-32bitUpgrade libpxbackend-1_0Upgrade perl-Net-LibproxyUpgrade libproxy-toolsUpgrade libproxy-develUpgrade libproxy1-config-gnome3Upgrade libproxy1-networkmanagerUpgrade libproxy-devel-docUpgrade libproxy1-config-gnome3-32bitUpgrade libproxy1-pacrunner-webkitUpgrade libproxy1 | Dec 12, 2013 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libproxy0Upgrade libproxy1 | Nov 8, 2024 | Nov 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub