Stay Secure with the Latest Linux Advisories

security advisorysecurity issueremote execution

Mageia: 2020-0373 Moderate: libproxy Stack Exhaustion Threat

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. (CVE-2020-25219) . MGASA-2020-0373 - Updated libproxy packages fix security vulnerability Publication date: 27 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0373.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-25219 url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. (CVE-2020-25219) References: - https://bugs.mageia.org/show_bug.cgi?id=27302 - https://lists.debian.org/debian-lts-announce/2020/09/msg00012.html - https://ubuntu.com/security/notices/USN-4514-1 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR/ - https://www.cve.org/CVERecord?id=CVE-2020-25219 SRPMS: - 7/core/libproxy-0.4.15-4.1.mga7 . Mageia 2020-0374 rolls out enhancements for libproxy, tackling severe vulnerabilities linked to remote code execution and stack overflow threats.. libproxy Security Update, Mageia Security Advisory, stack exhaustion, remote execution attack, libproxy vulnerability. . LinuxSecurity.com Team

Sep 27, 2020 Mageia