Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2012-5580

libproxy: format string flaw in bin/proxy

Format string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the http_proxy environment variable or a PAC file.

CVSS 2.0 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Libproxy Project
Products
Libproxy
CVE-2012-4504

libproxy: long proxy.pac file handling buffer overflow

Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.

CVSS 2.0 · 10.0 Critical EPSS 3.5% KEV · Not listed
Vendors
Libproxy Project
Products
Libproxy
CVE-2012-4505

libproxy: PAC handling insufficient content length check leading to buffer overflow

Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504.

CVSS 2.0 · 10.0 Critical EPSS 3.2% KEV · Not listed
Vendors
Libproxy Project Redhat
Products
Libproxy Enterprise Linux
CVE-2020-26154

libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

CVSS 3.1 · 9.8 Critical EPSS 3.6% KEV · Not listed
Vendors
Debian Fedoraproject Libproxy Project and 2 more
Products
Debian Linux Fedora Libproxy and 3 more
CVE-2020-25219

libproxy: uncontrolled recursion via an infinite stream response leading to stack exhaustion

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more