url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libproxy | Sep 23, 2020 | Sep 9, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 9, 2020 |
| Debian | — | Upgrade libproxy | Sep 14, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libproxyUpgrade libproxy-mozjs | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libproxy-mozjsUpgrade libproxy | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libproxyUpgrade libproxy-mozjs | Dec 16, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libproxy-mozjsUpgrade libproxyUpgrade python2-libproxyUpgrade python3-libproxy | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libproxy | Oct 13, 2020 | Sep 9, 2020 |
| Oracle Solaris | — | Upgrade library/libproxy to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/libproxy/libproxy-gnome to version 0.4.11.1-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade libproxy-binUpgrade libproxy-develUpgrade libproxy-networkmanagerUpgrade libproxy-webkitgtk4No solution existsUpgrade python3-libproxyUpgrade libproxy-debuginfoUpgrade libproxy-webkitgtk4-debuginfoUpgrade libproxy-gnome-debuginfoUpgrade libproxy-gnomeUpgrade libproxy-debugsourceUpgrade libproxy-networkmanager-debuginfoUpgrade libproxyUpgrade libproxy-bin-debuginfo | Sep 13, 2024 | Sep 9, 2020 |
| Suse | — | Upgrade python3-libproxyUpgrade libproxy-develUpgrade libproxy1Upgrade libproxy-toolsUpgrade libproxy1-config-gnome3Upgrade libproxy-sharpUpgrade libproxy1-pacrunner-webkitUpgrade libproxy1-32bitUpgrade perl-Net-LibproxyUpgrade libproxy1-config-kdeUpgrade python-libproxyUpgrade libproxy1-config-gnome3-32bitUpgrade libproxy1-networkmanagerUpgrade libproxy1-networkmanager-32bit | Oct 14, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade libproxy1v5 | Sep 18, 2020 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub