Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-26154

Опубликовано: 16 июл. 2020
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

A vulnerability was found in libproxy, where a buffer overflow can occur if a server serving a PAC file sends more than 102400 bytes without a Content-Length header, this flaw allows an attacker to trigger an overflow of PAC_HTTP_BLOCK_SIZE (512 bytes), potentially leading to application crashes or unexpected behavior when processing large PAC files.

Отчет

This vulnerability is rated as moderate because libproxy can overflow its buffer by PAC_HTTP_BLOCK_SIZE (512 bytes) if a server serving a PAC file sends more than 102400 bytes without a Content-Length header, specific conditions related to PAC file handling, and while it could lead to crashes or unexpected behavior, its overall impact is limited.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libproxyNot affected
Red Hat Enterprise Linux 7libproxyNot affected
Red Hat Enterprise Linux 8libproxyFixedRHEA-2024:885205.11.2024
Red Hat Enterprise Linux 8libproxyFixedRHEA-2024:885205.11.2024
Red Hat Enterprise Linux 8.8 Extended Update SupportlibproxyFixedRHSA-2024:620503.09.2024

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=1869639libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow

EPSS

Процентиль: 88%
0.03569
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 6 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

CVSS3: 9.8
nvd
почти 6 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

CVSS3: 9.8
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 9.8
debian
почти 6 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when ...

CVSS3: 9.8
github
около 4 лет назад

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

EPSS

Процентиль: 88%
0.03569
Низкий

7.5 High

CVSS3