Summary
Li Fei discovered that libproxy incorrectly handled certain PAC files.
An attacker could possibly use this issue to cause a crash or execute arbitrary
code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libproxy | 0.4.11-5ubuntu1.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | libproxy | 0.4.15-1ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | libproxy | 0.4.15-10ubuntu1.2 |
Vulnerabilities 1
-
Unscored —
url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC fi…
References
-
report
https://ubuntu.com/security/CVE-2020-26154