url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libproxy | Sep 23, 2020 | Sep 9, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 9, 2020 |
| Debian | — | Upgrade libproxy | Sep 14, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libproxy-mozjsUpgrade libproxy | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libproxyUpgrade libproxy-mozjs | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libproxyUpgrade libproxy-mozjs | Dec 16, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libproxy-mozjsUpgrade libproxyUpgrade python2-libproxyUpgrade python3-libproxy | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libproxy | Oct 13, 2020 | Sep 9, 2020 |
| Oracle Solaris | — | Upgrade library/libproxy to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/libproxy/libproxy-gnome to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade libproxy-binUpgrade libproxy-webkitgtk4No solution existsUpgrade libproxy-debuginfoUpgrade libproxy-gnome-debuginfoUpgrade libproxy-webkitgtk4-debuginfoUpgrade python3-libproxyUpgrade libproxy-develUpgrade libproxy-networkmanagerUpgrade libproxyUpgrade libproxy-gnomeUpgrade libproxy-bin-debuginfoUpgrade libproxy-debugsourceUpgrade libproxy-networkmanager-debuginfo | Sep 13, 2024 | Sep 9, 2020 |
| Suse | — | Upgrade perl-Net-LibproxyUpgrade libproxy1-config-gnome3-32bitUpgrade libproxy1-networkmanagerUpgrade libproxy1-networkmanager-32bitUpgrade libproxy1-pacrunner-webkitUpgrade libproxy1-32bitUpgrade libproxy-sharpUpgrade libproxy1-config-kdeUpgrade python-libproxyUpgrade libproxy1-config-gnome3Upgrade libproxy1Upgrade libproxy-toolsUpgrade python3-libproxyUpgrade libproxy-devel | Oct 14, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade libproxy1v5 | Sep 18, 2020 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub