Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libproxyUpgrade libproxy-webkitUpgrade libproxy-pythonUpgrade libproxy-mozjsUpgrade libproxy-binUpgrade libproxy-gnomeUpgrade libproxy-kdeUpgrade libproxy-devel | Dec 1, 2016 | Nov 11, 2012 |
| Debian | — | Upgrade libproxy | Jul 30, 2024 | Nov 11, 2012 |
| Oracle Solaris | — | Upgrade library/libproxy/libproxy-gnome to version 0.3.1-0.175.1.15.0.4.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Nov 11, 2012 |
| Oracle_linux | — | Upgrade libproxy-webkitUpgrade libproxy-gnomeUpgrade libproxyUpgrade libproxy-mozjsUpgrade libproxy-pythonUpgrade libproxy-kdeUpgrade libproxy-binUpgrade libproxy-devel | Oct 16, 2024 | Nov 11, 2012 |
| Suse | — | Upgrade libproxy-develUpgrade libproxy0-32bitUpgrade libproxy0-networkmanager-32bitUpgrade libproxy0-x86Upgrade libproxy0Upgrade libproxy0-config-gnome-32bitUpgrade libproxy0-config-kde4Upgrade libproxy0-networkmanagerUpgrade libproxy0-config-gnome | Dec 12, 2013 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libproxy1Upgrade libproxy0 | Nov 8, 2024 | Nov 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub