282 matches found
CVE-2020-26154
CVE-2020-26154 affects libproxy, with a buffer overflow in url.cpp when PAC is enabled and a large PAC file is delivered without a Content-Length header. Public advisories/records indicate impact could lead to crash or arbitrary code execution. Remediation: upgrade to a fixed libproxy version (e....
CVE-2020-26154
url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header...
CVE-2020-26154: Buffer Copy without Checking Size of Input
url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header...
MGASA-2020-0373 Updated libproxy packages fix security vulnerability
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. CVE-2020-25219...
Updated libproxy packages fix security vulnerability
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. CVE-2020-25219...
Fedora: Security Advisory for libproxy (FEDORA-2020-f92d372cf1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: libproxy-0.4.15-24.fc33
libproxy offers the following features: extremely small core footprint 35K no external dependencies within libproxy core libproxy plugins may have dependencies only 3 functions in the stable external API dynamic adjustment to changing network topology a standard way of dealing with proxy settings...
Fedora 32 : libproxy (2020-2407cb0512)
Fix CVE-2020-25219 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...
Fedora: Security Advisory for libproxy (FEDORA-2020-2407cb0512)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: libproxy-0.4.15-18.fc32
libproxy offers the following features: extremely small core footprint 35K no external dependencies within libproxy core libproxy plugins may have dependencies only 3 functions in the stable external API dynamic adjustment to changing network topology a standard way of dealing with proxy settings...
libproxy buffer overflow vulnerability (CNVD-2020-58051)
libproxy is a library for individual developers that provides automatic configuration of proxies. A buffer overflow vulnerability exists in libproxy versions 0.4.x through 0.4.15. The vulnerability stems from a network system or product performing operations in memory without properly validating...
CVE-2020-25219
A flaw was found in libproxy in versions 0.4 through 0.4.15. A remote HTTP server can trigger an uncontrolled recursion via a response composed of an infinite stream that lacks a newline character leading to a stack exhaustion. The highest threat from this vulnerability is to system availability...
Ubuntu: Security Advisory (USN-4514-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4514-1: libproxy vulnerability
It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service...
USN-4514-1 libproxy vulnerability
It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : libproxy vulnerability (USN-4514-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4514-1 advisory. It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of...
Debian DLA-2372-1 : libproxy security update
It was discovered that there was a denial of service attack in libproxy, a library to make applications HTTP proxy aware. A remote server could cause an infinite stack recursion. For Debian 9 'Stretch', this problem has been fixed in version 0.4.14-2+deb9u1. We recommend that you upgrade your...
Debian: Security Advisory (DLA-2372-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2372-1] libproxy security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2372-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 12, 2020 https://wiki.debian.org/LTS -...