Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Mageia 7: MGASA-2020-0399 Critical: Libproxy Buffer Overflow

mageia
Calendar Grey November 8, 2020
Dist Mageia Esm H88
Mageia advisory MGASA-2020-0400 highlights a critical security vulnerability in libproxy. This update is essential for users looking to strengthen their system's security
url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header

Summary

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header. (CVE-2020-26154)

References

- https://bugs.mageia.org/show_bug.cgi?id=27411

- https://lists.suse.com/pipermail/sle-security-updates/2020-October/007540.html

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3BID3HVHAF6DA3YJOFDBSAZSMR3ODNIW/

- https://www.cve.org/CVERecord?id=CVE-2020-26154

Topics%20covered

Topics Covered

security advisory security update buffer overflow libproxy mageia PAC file

Resolution

SRPMS

- 7/core/libproxy-0.4.15-4.2.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 08 Nov 2020
URL: https://advisories.mageia.org/MGASA-2020-0399.html
Type: security
CVE: CVE-2020-26154

Topics%20covered

Topics Covered

security advisory security update buffer overflow libproxy mageia PAC file

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here