MGASA-2020-0373
- Source
- https://advisories.mageia.org/MGASA-2020-0373.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0373.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0373
- Related
- Published
- 2020-09-27T20:06:37Z
- Modified
- 2020-09-27T19:35:07Z
- Summary
- Updated libproxy packages fix security vulnerability
- Details
-
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. (CVE-2020-25219)
- References
-
- https://advisories.mageia.org/MGASA-2020-0373.html
- https://bugs.mageia.org/show_bug.cgi?id=27302
- https://www.debian.org/lts/security/2020/dla-2372
- https://ubuntu.com/security/notices/USN-4514-1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / libproxy
Package
- Name
- libproxy
- Purl
- pkg:rpm/mageia/libproxy?distro=mageia-7