url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libproxy | Sep 23, 2020 | Sep 9, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 9, 2020 |
| Debian | — | Upgrade libproxy | Sep 14, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libproxyUpgrade libproxy-mozjs | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libproxy-mozjsUpgrade libproxy | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libproxyUpgrade libproxy-mozjs | Dec 16, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-libproxyUpgrade python2-libproxyUpgrade libproxy-mozjsUpgrade libproxy | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libproxy | Oct 13, 2020 | Sep 9, 2020 |
| Oracle Solaris | — | Upgrade library/libproxy/libproxy-gnome to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/libproxy to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade python3-libproxyUpgrade libproxy-develUpgrade libproxy-webkitgtk4Upgrade libproxy-debuginfoUpgrade libproxy-binUpgrade libproxy-gnome-debuginfoUpgrade libproxy-networkmanagerNo solution existsUpgrade libproxy-webkitgtk4-debuginfoUpgrade libproxy-gnomeUpgrade libproxy-networkmanager-debuginfoUpgrade libproxy-bin-debuginfoUpgrade libproxy-debugsourceUpgrade libproxy | Sep 13, 2024 | Sep 9, 2020 |
| Suse | — | Upgrade libproxy1-config-gnome3-32bitUpgrade python-libproxyUpgrade libproxy1-pacrunner-webkitUpgrade libproxy-sharpUpgrade libproxy1-networkmanager-32bitUpgrade libproxy1-32bitUpgrade perl-Net-LibproxyUpgrade libproxy1-config-kdeUpgrade libproxy1-networkmanagerUpgrade libproxy-toolsUpgrade libproxy1-config-gnome3Upgrade python3-libproxyUpgrade libproxy1Upgrade libproxy-devel | Oct 14, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade libproxy1v5 | Sep 18, 2020 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub