Summary
It was discovered that libproxy incorrectly handled certain PAC files.
An attacker could possibly use this issue to cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libproxy | 0.4.11-5ubuntu1.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libproxy | 0.4.15-1ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | libproxy | 0.4.15-10ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion…
References
-
report
https://ubuntu.com/security/CVE-2020-25219