url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libproxy | Sep 23, 2020 | Sep 9, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 9, 2020 |
| Debian | — | Upgrade libproxy | Sep 14, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libproxy-mozjsUpgrade libproxy | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libproxy-mozjsUpgrade libproxy | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libproxyUpgrade libproxy-mozjs | Dec 16, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-libproxyUpgrade python3-libproxyUpgrade libproxy-mozjsUpgrade libproxy | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libproxy | Oct 13, 2020 | Sep 9, 2020 |
| Oracle Solaris | — | Upgrade library/libproxy/libproxy-gnome to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/libproxy to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade libproxy-debugsourceUpgrade libproxy-networkmanager-debuginfoUpgrade libproxy-bin-debuginfoUpgrade libproxy-gnomeUpgrade libproxyNo solution existsUpgrade libproxy-webkitgtk4Upgrade python3-libproxyUpgrade libproxy-debuginfoUpgrade libproxy-develUpgrade libproxy-networkmanagerUpgrade libproxy-binUpgrade libproxy-gnome-debuginfoUpgrade libproxy-webkitgtk4-debuginfo | Sep 13, 2024 | Sep 9, 2020 |
| Suse | — | Upgrade python3-libproxyUpgrade libproxy-toolsUpgrade libproxy1-config-gnome3Upgrade libproxy-develUpgrade libproxy1Upgrade perl-Net-LibproxyUpgrade libproxy1-config-kdeUpgrade libproxy1-config-gnome3-32bitUpgrade python-libproxyUpgrade libproxy1-pacrunner-webkitUpgrade libproxy-sharpUpgrade libproxy1-networkmanagerUpgrade libproxy1-32bitUpgrade libproxy1-networkmanager-32bit | Oct 14, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade libproxy1v5 | Sep 18, 2020 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub