CVE-2020-25219
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...
CVE-2020-25219 is a high vulnerability (CVSS 7.5) in Libproxy Project Libproxy, published September 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.37%, the 91st percentile. Fixed in libproxy 0.4.15-r7.
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-674
- Updated
- 2026-11-02
CVE List No score
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
CVE-2020-25219- Updated
- 2026-11-02
EUVDEUVD-2020-17909 No score
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
EUVD-2020-17909- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pj93-8v65-p9w3
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
GHSA-pj93-8v65-p9w3- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674, CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-25219
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
ALPINE-CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-6645
7.5
CVE-2020-25219 affecting package libproxy for versions less than 0.4.15-20
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
AZL-6645- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSVAZL-7270
7.5
CVE-2020-25219 affecting package libproxy for versions less than 0.4.15-20
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
AZL-7270- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-25219
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
DEBIAN-CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2022-1756
7.5
libproxy security update
libproxy offers the following features:* extremely small core footprint (< 35k).* no external dependencies within libproxy core.(libproxy plugins may have dependencies).* only 3 functions in the stable external API.* dynamic adjustment to changing network topology.* a standard way of dealing with proxy settings across all scenarios.
Security Fix(es):
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.(CVE-2020-25219)
- Record
OESA-2022-1756- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHEA-2024:8852
7.5
Red Hat Enhancement Advisory: libproxy bug fix and enhancement update
- Record
RHEA-2024:8852- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:6205
7.5
Red Hat Security Advisory: libproxy security update
- Record
RHSA-2024:6205- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-25219
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
UBUNTU-CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0373 No score
Updated libproxy packages fix security vulnerability
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. (CVE-2020-25219)
- Record
MGASA-2020-0373- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1676-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1676-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1680-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1680-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10973-1 No score
libproxy-devel-0.4.17-2.2 on GA media
These are all security issues fixed in the libproxy-devel-0.4.17-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10973-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2900-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
- Record
SUSE-SU-2020:2900-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2901-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
- Record
SUSE-SU-2020:2901-1- Updated
- 2026-11-02
OSVUSN-4514-1 No score
libproxy vulnerability
It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service.
- Record
USN-4514-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libproxyAlpine:v3.12 |
0.4.0 up to 0.4.15-r7 | 0.4.15-r7 |
libproxyAlpine:v3.13 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.14 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.15 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.16 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.17 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.18 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.19 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.20 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.21 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
Show 120 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libproxyAlpine:v3.22 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.23 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.24 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAzure Linux:2 |
before 0.4.15-20 | 0.4.15-20 |
libproxyDebian:12 |
before 0.4.15-15 | 0.4.15-15 |
libproxyDebian:13 |
before 0.4.15-15 | 0.4.15-15 |
libproxyDebian:14 |
before 0.4.15-15 | 0.4.15-15 |
libproxyDebian:9 |
before 0.4.14-2+deb9u1, plus listed versions 0.4.14-2 |
0.4.14-2+deb9u1 |
libproxyDebian:10 |
before 0.4.15-5+deb10u1, plus listed versions 0.4.15-5 |
0.4.15-5+deb10u1 |
libproxyMageia:7 |
before 0.4.15-4.1.mga7 | 0.4.15-4.1.mga7 |
libproxyopenEuler:20.03-LTS-SP1 |
before 0.4.15-18.oe1 | 0.4.15-18.oe1 |
libproxyopenEuler:20.03-LTS-SP3 |
before 0.4.15-18.oe1 | 0.4.15-18.oe1 |
libproxy-binRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-bin-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnomeRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnome-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanagerRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanager-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4Red Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxyRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-bin-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnome-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanager-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
python3-libproxyRed Hat:enterprise_linux:8::baseos |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-bin-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-develRed Hat:enterprise_linux:8::crb |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnome-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanager-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-binRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-bin-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnomeRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnome-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanagerRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanager-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4Red Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxyRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-bin-debuginfoRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debuginfoRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debugsourceRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnome-debuginfoRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanager-debuginfoRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4-debuginfoRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
python3-libproxyRed Hat:rhel_eus:8.8::baseos |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-bin-debuginfoRed Hat:rhel_eus:8.8::crb |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debuginfoRed Hat:rhel_eus:8.8::crb |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debugsourceRed Hat:rhel_eus:8.8::crb |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-develRed Hat:rhel_eus:8.8::crb |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnome-debuginfoRed Hat:rhel_eus:8.8::crb |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanager-debuginfoRed Hat:rhel_eus:8.8::crb |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4-debuginfoRed Hat:rhel_eus:8.8::crb |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxySUSE:HPE Helion OpenStack 8 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:HPE Helion OpenStack 8 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud 7 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud 7 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud 8 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud 8 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud 9 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud 9 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud Crowbar 8 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud Crowbar 8 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud Crowbar 9 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud Crowbar 9 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP2-LTSS |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP2-BCL |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP2-BCL |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP3-LTSS |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP3-BCL |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP3-BCL |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP4-LTSS |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Enterprise Storage 5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Enterprise Storage 5 |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Module for Development Tools 15 SP1 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Module for Development Tools 15 SP2 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise Server 15-LTSS |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 15-LTSS |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 15 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 15 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Workstation Extension 15 SP1 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Workstation Extension 15 SP2 |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxyUbuntu:16.04:LTS |
before 0.4.11-5ubuntu1.1, plus listed versions 0.4.11-4ubuntu3~gcc5.30.4.11-5ubuntu1 |
0.4.11-5ubuntu1.1 |
libproxyUbuntu:18.04:LTS |
before 0.4.15-1ubuntu0.1, plus listed versions 0.4.14-30.4.15-0ubuntu10.4.15-1 |
0.4.15-1ubuntu0.1 |
libproxyUbuntu:20.04:LTS |
before 0.4.15-10ubuntu1.1, plus listed versions 0.4.15-70.4.15-90.4.15-9build10.4.15-9ubuntu10.4.15-100.4.15-10ubuntu1 |
0.4.15-10ubuntu1.1 |
libproxyopenSUSE:Leap 15.1 |
before 0.4.15-lp151.4.3.1 | 0.4.15-lp151.4.3.1 |
libproxy-pluginsopenSUSE:Leap 15.1 |
before 0.4.15-lp151.4.3.1 | 0.4.15-lp151.4.3.1 |
libproxyopenSUSE:Leap 15.2 |
before 0.4.15-lp152.5.3.1 | 0.4.15-lp152.5.3.1 |
libproxy-pluginsopenSUSE:Leap 15.2 |
before 0.4.15-lp152.5.3.1 | 0.4.15-lp152.5.3.1 |
libproxyopenSUSE:Tumbleweed |
before 0.4.17-2.2 | 0.4.17-2.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected, aliases, references | OSV |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/libproxy/libproxy/issues/134
lists.debian.org/debian-lts-announce/2020/09/msg00012.html
usn.ubuntu.com/4514-1
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JF5JSONJNO64ARWRVOS6K6HSIPHEF3H2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSVZAAVHBJR3Z4MZNR55QW3OQFAS2STH
Show 37 moreShow less
lists.opensuse.org/opensuse-security-announce/2020-10/msg00030.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00033.html
debian.org/security/2020/dsa-4800
nvd.nist.gov/vuln/detail/CVE-2020-25219
lists.fedoraproject.org/archives/list/[email protected]/message/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR
lists.fedoraproject.org/archives/list/[email protected]/message/JF5JSONJNO64ARWRVOS6K6HSIPHEF3H2
lists.fedoraproject.org/archives/list/[email protected]/message/SSVZAAVHBJR3Z4MZNR55QW3OQFAS2STH
github.com/advisories/GHSA-pj93-8v65-p9w3
security.alpinelinux.org/vuln/CVE-2020-25219
security-tracker.debian.org/tracker/CVE-2020-25219
advisories.mageia.org/MGASA-2020-0373.html
bugs.mageia.org/show_bug.cgi?id=27302
debian.org/lts/security/2020/dla-2372
ubuntu.com/security/notices/USN-4514-1
lists.fedoraproject.org/archives/list/[email protected]/thread/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1756
access.redhat.com/errata/RHEA-2024:8852
security.access.redhat.com/data/csaf/v2/advisories/2024/rhea-2024_8852.json
access.redhat.com/security/cve/CVE-2020-25219
bugzilla.redhat.com/show_bug.cgi?id=1880349
cve.org/CVERecord?id=CVE-2020-25219
access.redhat.com/security/cve/CVE-2020-26154
bugzilla.redhat.com/show_bug.cgi?id=1869639
cve.org/CVERecord?id=CVE-2020-26154
nvd.nist.gov/vuln/detail/CVE-2020-26154
access.redhat.com/errata/RHSA-2024:6205
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6205.json
suse.com/support/update/announcement/2020/suse-su-20202900-1
bugzilla.suse.com/1176410
bugzilla.suse.com/1177143
suse.com/security/cve/CVE-2020-25219
suse.com/security/cve/CVE-2020-26154
suse.com/support/update/announcement/2020/suse-su-20202901-1
ubuntu.com/security/CVE-2020-25219
lists.opensuse.org/archives/list/[email protected]/thread/J7JDZHUFWENH4VEXEW5NBCIYIE2TGV4R
lists.opensuse.org/archives/list/[email protected]/thread/UHT4BRJLYFL5MO7IUTNSV4E7WWYHA5LB