url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libproxy | Sep 23, 2020 | Sep 9, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Sep 9, 2020 | |
| Debian | debian-upgrade-libproxy | Sep 14, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libproxyhuawei-euleros-2_0_sp2-upgrade-libproxy-mozjs | Nov 3, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libproxyhuawei-euleros-2_0_sp3-upgrade-libproxy-mozjs | Jan 20, 2021 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libproxyhuawei-euleros-2_0_sp5-upgrade-libproxy-mozjs | Dec 16, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libproxyhuawei-euleros-2_0_sp8-upgrade-libproxy-mozjshuawei-euleros-2_0_sp8-upgrade-python2-libproxyhuawei-euleros-2_0_sp8-upgrade-python3-libproxy | Nov 3, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libproxy | Oct 13, 2020 | Sep 9, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-libproxy-0-4-11-1-11-4-27-0-1-82-0oracle-solaris-11-4-upgrade-library-libproxy-libproxy-gnome-0-4-11-1-11-4-27-0-1-82-0 | Jan 19, 2021 | Sep 9, 2020 | |
| Redhat_linux | redhat-upgrade-libproxyredhat-upgrade-libproxy-binredhat-upgrade-libproxy-bin-debuginforedhat-upgrade-libproxy-debuginforedhat-upgrade-libproxy-debugsourceredhat-upgrade-libproxy-develredhat-upgrade-libproxy-gnomeredhat-upgrade-libproxy-gnome-debuginforedhat-upgrade-libproxy-networkmanagerredhat-upgrade-libproxy-networkmanager-debuginforedhat-upgrade-libproxy-webkitgtk4redhat-upgrade-libproxy-webkitgtk4-debuginforedhat-upgrade-python3-libproxy | Sep 13, 2024 | Sep 9, 2020 | |
| Suse | — | suse-upgrade-libproxy-develsuse-upgrade-libproxy-sharpsuse-upgrade-libproxy-toolssuse-upgrade-libproxy1suse-upgrade-libproxy1-32bitsuse-upgrade-libproxy1-config-gnome3suse-upgrade-libproxy1-config-gnome3-32bitsuse-upgrade-libproxy1-config-kdesuse-upgrade-libproxy1-networkmanagersuse-upgrade-libproxy1-networkmanager-32bitsuse-upgrade-libproxy1-pacrunner-webkitsuse-upgrade-perl-net-libproxysuse-upgrade-python-libproxysuse-upgrade-python3-libproxy | Oct 14, 2020 | Sep 9, 2020 |
| Ubuntu | ubuntu-upgrade-libproxy1v5 | Sep 18, 2020 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub