Lucene search

K
mageiaGentoo FoundationMGASA-2020-0373
HistorySep 27, 2020 - 11:06 p.m.

Updated libproxy packages fix security vulnerability

2020-09-2723:06:37
Gentoo Foundation
advisories.mageia.org
9

0.004 Low

EPSS

Percentile

73.3%

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. (CVE-2020-25219)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchlibproxy< 0.4.15-4.1libproxy-0.4.15-4.1.mga7