CVE-2020-25219

HIGH7.5EPSS 0.45%

libproxy - security update

發布日:2020/9/9修改日:2026/3/9

也稱為:DSA-4800-1DEBIAN-CVE-2020-25219

描述

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.

受影響套件(3)

Debian/libproxyfrom 0, < 0.4.15-15
Debian/libproxyfrom 0, < 0.4.14-2+deb9u1
Debian/libproxyfrom 0, < 0.4.15-5+deb10u1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2020-25219