Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-26154

Опубликовано: 30 сент. 2020
Источник: nvd
CVSS3: 9.8
CVSS2: 6.8
EPSS Низкий

Описание

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libproxy_project:libproxy:*:*:*:*:*:*:*:*
Версия до 0.4.15 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

EPSS

Процентиль: 72%
0.00717
Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 5 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

CVSS3: 7.5
redhat
больше 5 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

CVSS3: 9.8
msrc
около 4 лет назад

Описание отсутствует

CVSS3: 9.8
debian
больше 5 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when ...

CVSS3: 9.8
github
больше 3 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

EPSS

Процентиль: 72%
0.00717
Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120