CVE-2020-26154 PUBLISHED

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

EPSS 0.72% · 72.3th percentile

Risk Scores

EPSS Score
0.72%
72.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlibproxy0.4.14-3, 0.4.15-1ubuntu0.1, 0.4.15-1
Ubuntu:20.04:LTSlibproxy0.4.15-10ubuntu1.1, 0.4.15-9build1, 0.4.15-9ubuntu1
Ubuntu:16.04:LTSlibproxy0.4.11-5ubuntu1.1, 0.4.11-5ubuntu1, 0.4.11-4ubuntu3~gcc5.3

Timeline

References

Open in Interactive Console →