CVE-2020-25219

The CVE-2020-25219 issue affects libproxy in the 0.4.x line (up to 0.4.15). A remote HTTP PAC server can trigger uncontrolled recursion by sending a response that is an infinite stream without a newline, causing stack exhaustion. Public advisories confirm vulnerable packages include libproxy and ...

CVE-2012-5580

CVE-2012-5580 affects libproxy 0.3.1. The vulnerability exists in print_proxies (bin/proxy.c) where a format string flaw in a proxy name allows context-dependent attackers to trigger a crash (and possibly code execution) via format string specifiers. Exploitation scenarios mentioned include the h...