NetSight
IP …
critical9.8

CVE-2020-26154

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-l…

Impact

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

Affected products

VendorProductAffected versions
Libproxy ProjectLibproxy
through 0.4.15
FedoraprojectFedora
Versions 32, 33
DebianDebian Linux
Versions 9.0, 10.0
OpensuseLeap
Versions 15.1, 15.2

Weakness classification

CWE-120

References