CVE-2020-25219
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-674
- Updated
- 2026-11-02
CVE List No score
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
CVE-2020-25219- Updated
- 2026-11-02
EUVDEUVD-2020-17909 No score
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
EUVD-2020-17909- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pj93-8v65-p9w3
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
GHSA-pj93-8v65-p9w3- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674, CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-25219
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
ALPINE-CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-6645
7.5
CVE-2020-25219 affecting package libproxy for versions less than 0.4.15-20
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
AZL-6645- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSVAZL-7270
7.5
CVE-2020-25219 affecting package libproxy for versions less than 0.4.15-20
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
AZL-7270- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-25219
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
DEBIAN-CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2022-1756
7.5
libproxy security update
libproxy offers the following features:* extremely small core footprint (< 35k).* no external dependencies within libproxy core.(libproxy plugins may have dependencies).* only 3 functions in the stable external API.* dynamic adjustment to changing network topology.* a standard way of dealing with proxy settings across all scenarios.
Security Fix(es):
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.(CVE-2020-25219)
- Record
OESA-2022-1756- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHEA-2024:8852
7.5
Red Hat Enhancement Advisory: libproxy bug fix and enhancement update
- Record
RHEA-2024:8852- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:6205
7.5
Red Hat Security Advisory: libproxy security update
- Record
RHSA-2024:6205- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-25219
7.5
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
- Record
UBUNTU-CVE-2020-25219- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0373 No score
Updated libproxy packages fix security vulnerability
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion. (CVE-2020-25219)
- Record
MGASA-2020-0373- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1676-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1676-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1680-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1680-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10973-1 No score
libproxy-devel-0.4.17-2.2 on GA media
These are all security issues fixed in the libproxy-devel-0.4.17-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10973-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2900-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
- Record
SUSE-SU-2020:2900-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2901-1 No score
Security update for libproxy
This update for libproxy fixes the following issues:
- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
- Record
SUSE-SU-2020:2901-1- Updated
- 2026-11-02
OSVUSN-4514-1 No score
libproxy vulnerability
It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service.
- Record
USN-4514-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libproxyAlpine:v3.12 |
0.4.0 up to 0.4.15-r7 | 0.4.15-r7 |
libproxyAlpine:v3.13 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.14 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.15 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.16 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.17 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.18 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.19 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.20 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.21 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
Show 120 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libproxyAlpine:v3.22 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.23 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAlpine:v3.24 |
0.4.0 up to 0.4.15-r8 | 0.4.15-r8 |
libproxyAzure Linux:2 |
before 0.4.15-20 | 0.4.15-20 |
libproxyDebian:12 |
before 0.4.15-15 | 0.4.15-15 |
libproxyDebian:13 |
before 0.4.15-15 | 0.4.15-15 |
libproxyDebian:14 |
before 0.4.15-15 | 0.4.15-15 |
libproxyDebian:9 |
before 0.4.14-2+deb9u1, plus listed versions 0.4.14-2 |
0.4.14-2+deb9u1 |
libproxyDebian:10 From an advisory covering 2 CVEs |
before 0.4.15-5+deb10u1, plus listed versions 0.4.15-5 |
0.4.15-5+deb10u1 |
libproxyMageia:7 |
before 0.4.15-4.1.mga7 | 0.4.15-4.1.mga7 |
libproxyopenEuler:20.03-LTS-SP1 |
before 0.4.15-18.oe1 | 0.4.15-18.oe1 |
libproxyopenEuler:20.03-LTS-SP3 |
before 0.4.15-18.oe1 | 0.4.15-18.oe1 |
libproxy-binRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-bin-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnomeRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnome-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanagerRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanager-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxyRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-bin-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnome-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanager-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
python3-libproxyRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-bin-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-develRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-gnome-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-networkmanager-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-webkitgtk4-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.5.el8_10 | 0:0.4.15-5.5.el8_10 |
libproxy-binRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-bin-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debugsourceRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnomeRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnome-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanagerRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanager-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4Red Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxyRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-bin-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debugsourceRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnome-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanager-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
python3-libproxyRed Hat:rhel_eus:8.8::baseos From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-bin-debuginfoRed Hat:rhel_eus:8.8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debuginfoRed Hat:rhel_eus:8.8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-debugsourceRed Hat:rhel_eus:8.8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-develRed Hat:rhel_eus:8.8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-gnome-debuginfoRed Hat:rhel_eus:8.8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-networkmanager-debuginfoRed Hat:rhel_eus:8.8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxy-webkitgtk4-debuginfoRed Hat:rhel_eus:8.8::crb From an advisory covering 2 CVEs |
before 0:0.4.15-5.4.el8_8 | 0:0.4.15-5.4.el8_8 |
libproxySUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud 7 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud 7 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud 9 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud 9 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:OpenStack Cloud Crowbar 9 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Enterprise Storage 5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxy-pluginsSUSE:Enterprise Storage 5 From an advisory covering 2 CVEs |
before 0.4.13-18.3.1 | 0.4.13-18.3.1 |
libproxySUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Module for Development Tools 15 SP1 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise Server 15-LTSS From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxySUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Workstation Extension 15 SP1 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxy-pluginsSUSE:Linux Enterprise Workstation Extension 15 SP2 From an advisory covering 2 CVEs |
before 0.4.15-4.3.1 | 0.4.15-4.3.1 |
libproxyUbuntu:16.04:LTS |
before 0.4.11-5ubuntu1.1, plus listed versions 0.4.11-4ubuntu3~gcc5.30.4.11-5ubuntu1 |
0.4.11-5ubuntu1.1 |
libproxyUbuntu:18.04:LTS |
before 0.4.15-1ubuntu0.1, plus listed versions 0.4.14-30.4.15-0ubuntu10.4.15-1 |
0.4.15-1ubuntu0.1 |
libproxyUbuntu:20.04:LTS |
before 0.4.15-10ubuntu1.1, plus listed versions 0.4.15-70.4.15-90.4.15-9build10.4.15-9ubuntu10.4.15-100.4.15-10ubuntu1 |
0.4.15-10ubuntu1.1 |
libproxyopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 0.4.15-lp151.4.3.1 | 0.4.15-lp151.4.3.1 |
libproxy-pluginsopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 0.4.15-lp151.4.3.1 | 0.4.15-lp151.4.3.1 |
libproxyopenSUSE:Leap 15.2 From an advisory covering 2 CVEs |
before 0.4.15-lp152.5.3.1 | 0.4.15-lp152.5.3.1 |
libproxy-pluginsopenSUSE:Leap 15.2 From an advisory covering 2 CVEs |
before 0.4.15-lp152.5.3.1 | 0.4.15-lp152.5.3.1 |
libproxyopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 0.4.17-2.2 | 0.4.17-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-25219 is a high vulnerability (CVSS 7.5) in Libproxy Project Libproxy, published September 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.37%, the 91st percentile. Fixed in libproxy 0.4.15-r7.
References
github.com/libproxy/libproxy/issues/134
lists.debian.org/debian-lts-announce/2020/09/msg00012.html
usn.ubuntu.com/4514-1
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JF5JSONJNO64ARWRVOS6K6HSIPHEF3H2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSVZAAVHBJR3Z4MZNR55QW3OQFAS2STH
Show 37 moreShow less
lists.opensuse.org/opensuse-security-announce/2020-10/msg00030.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00033.html
debian.org/security/2020/dsa-4800
nvd.nist.gov/vuln/detail/CVE-2020-25219
lists.fedoraproject.org/archives/list/[email protected]/message/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR
lists.fedoraproject.org/archives/list/[email protected]/message/JF5JSONJNO64ARWRVOS6K6HSIPHEF3H2
lists.fedoraproject.org/archives/list/[email protected]/message/SSVZAAVHBJR3Z4MZNR55QW3OQFAS2STH
github.com/advisories/GHSA-pj93-8v65-p9w3
security.alpinelinux.org/vuln/CVE-2020-25219
security-tracker.debian.org/tracker/CVE-2020-25219
advisories.mageia.org/MGASA-2020-0373.html
bugs.mageia.org/show_bug.cgi?id=27302
debian.org/lts/security/2020/dla-2372
ubuntu.com/security/notices/USN-4514-1
lists.fedoraproject.org/archives/list/[email protected]/thread/CNID6EZVOVH7EZB7KFU2EON54CFDIVUR
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1756
access.redhat.com/errata/RHEA-2024:8852
security.access.redhat.com/data/csaf/v2/advisories/2024/rhea-2024_8852.json
access.redhat.com/security/cve/CVE-2020-25219
bugzilla.redhat.com/show_bug.cgi?id=1880349
cve.org/CVERecord?id=CVE-2020-25219
access.redhat.com/security/cve/CVE-2020-26154
bugzilla.redhat.com/show_bug.cgi?id=1869639
cve.org/CVERecord?id=CVE-2020-26154
nvd.nist.gov/vuln/detail/CVE-2020-26154
access.redhat.com/errata/RHSA-2024:6205
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6205.json
suse.com/support/update/announcement/2020/suse-su-20202900-1
bugzilla.suse.com/1176410
bugzilla.suse.com/1177143
suse.com/security/cve/CVE-2020-25219
suse.com/security/cve/CVE-2020-26154
suse.com/support/update/announcement/2020/suse-su-20202901-1
ubuntu.com/security/CVE-2020-25219
lists.opensuse.org/archives/list/[email protected]/thread/J7JDZHUFWENH4VEXEW5NBCIYIE2TGV4R
lists.opensuse.org/archives/list/[email protected]/thread/UHT4BRJLYFL5MO7IUTNSV4E7WWYHA5LB