CVE catalog

CVE-2020-25219

libproxy: CVE-2020-25219

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.37% · Oct 25, 2026

A flaw was found in libproxy in versions 0.4 through 0.4.15. A remote HTTP server can trigger an uncontrolled recursion via a response composed of an infinite stream that lacks a newline character leading to a stack exhaustion. The highest threat from this vulnerability is to system availability. libproxy: uncontrolled recursion via an infinite stream response leading to stack exhaustion Red Hat has determined this flaw to be of moderate impact as the attack triggers an uncontrolled recursion beyond the attacker's control and results in a DoS, which can cause service disruptions but does not directly enable privilege escalation or arbitrary code execution. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibproxysid0.5.12-3fixed
Debianlibproxyforky0.5.12-3fixed
Debianlibproxytrixie0.5.9-1fixed
Debianlibproxybookworm0.4.18-1.2fixed
Ubuntulibproxy16.040.4.11-4ubuntu3~gcc5.3vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1.1fixed
Ubuntulibproxy18.040.4.14-3vulnerable
Ubuntulibproxy18.040.4.15-0ubuntu1vulnerable
Ubuntulibproxy18.040.4.15-1vulnerable
Ubuntulibproxy18.040.4.15-1ubuntu0.1fixed
Ubuntulibproxy20.040.4.15-7vulnerable
Ubuntulibproxy20.040.4.15-9vulnerable
Ubuntulibproxy20.040.4.15-9build1vulnerable
Ubuntulibproxy20.040.4.15-9ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1.1fixed
Ubuntulibproxy16.040.4.11-4ubuntu3~gcc5.3vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1.1fixed
Ubuntulibproxy18.040.4.14-3vulnerable
Ubuntulibproxy18.040.4.15-0ubuntu1vulnerable
Ubuntulibproxy18.040.4.15-1vulnerable
Ubuntulibproxy18.040.4.15-1ubuntu0.1fixed
Ubuntulibproxy20.040.4.15-7vulnerable
Ubuntulibproxy20.040.4.15-9vulnerable
Ubuntulibproxy20.040.4.15-9build1vulnerable
Ubuntulibproxy20.040.4.15-9ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1.1fixed
Suselibproxylinux enterprise module for basesystem 15 sp10.4.15-4.3.1fixed
Suselibproxylinux enterprise module for basesystem 15 sp20.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise module for development tools 15 sp10.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise module for development tools 15 sp20.4.15-4.3.1fixed
Suselibproxylinux enterprise high performance computing 15-espos0.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise high performance computing 15-espos0.4.15-4.3.1fixed
Suselibproxylinux enterprise high performance computing 15-ltss0.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise high performance computing 15-ltss0.4.15-4.3.1fixed
Suselibproxylinux enterprise server 15-ltss0.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise server 15-ltss0.4.15-4.3.1fixed
Suselibproxylinux enterprise server for sap applications 150.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise server for sap applications 150.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise workstation extension 15 sp10.4.15-4.3.1fixed
Suselibproxy-pluginslinux enterprise workstation extension 15 sp20.4.15-4.3.1fixed
Opensuselibproxyleap 15.10.4.15-lp151.4.3.1fixed
Opensuselibproxy-pluginsleap 15.10.4.15-lp151.4.3.1fixed
Suselibproxyhpe helion openstack 80.4.13-18.3.1fixed
Suselibproxy-pluginshpe helion openstack 80.4.13-18.3.1fixed
Suselibproxyopenstack cloud 70.4.13-18.3.1fixed
Suselibproxy-pluginsopenstack cloud 70.4.13-18.3.1fixed
Suselibproxyopenstack cloud 80.4.13-18.3.1fixed
Suselibproxy-pluginsopenstack cloud 80.4.13-18.3.1fixed
Suselibproxyopenstack cloud 90.4.13-18.3.1fixed
Suselibproxy-pluginsopenstack cloud 90.4.13-18.3.1fixed
Suselibproxyopenstack cloud crowbar 80.4.13-18.3.1fixed
Suselibproxy-pluginsopenstack cloud crowbar 80.4.13-18.3.1fixed
Suselibproxyopenstack cloud crowbar 90.4.13-18.3.1fixed
Suselibproxy-pluginsopenstack cloud crowbar 90.4.13-18.3.1fixed
Suselibproxylinux enterprise server for sap applications 12 sp20.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server for sap applications 12 sp20.4.13-18.3.1fixed
Suselibproxylinux enterprise server for sap applications 12 sp30.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server for sap applications 12 sp30.4.13-18.3.1fixed
Suselibproxylinux enterprise server for sap applications 12 sp40.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server for sap applications 12 sp40.4.13-18.3.1fixed
Suselibproxylinux enterprise software development kit 12 sp50.4.13-18.3.1fixed
Suselibproxylinux enterprise server 12 sp2-ltss0.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server 12 sp2-ltss0.4.13-18.3.1fixed
Suselibproxylinux enterprise server 12 sp2-bcl0.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server 12 sp2-bcl0.4.13-18.3.1fixed
Suselibproxylinux enterprise server 12 sp3-ltss0.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server 12 sp3-ltss0.4.13-18.3.1fixed
Suselibproxylinux enterprise server 12 sp3-bcl0.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server 12 sp3-bcl0.4.13-18.3.1fixed
Suselibproxylinux enterprise server 12 sp4-ltss0.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server 12 sp4-ltss0.4.13-18.3.1fixed
Suselibproxylinux enterprise server 12 sp50.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server 12 sp50.4.13-18.3.1fixed
Suselibproxylinux enterprise server for sap applications 12 sp50.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise server for sap applications 12 sp50.4.13-18.3.1fixed
Suselibproxy-pluginslinux enterprise workstation extension 12 sp50.4.13-18.3.1fixed
Suselibproxyenterprise storage 50.4.13-18.3.1fixed
Suselibproxy-pluginsenterprise storage 50.4.13-18.3.1fixed
Opensuselibproxytumbleweed0.4.17-2.2fixed
Opensuselibproxyleap 15.20.4.15-lp152.5.3.1fixed
Opensuselibproxy-pluginsleap 15.20.4.15-lp152.5.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibproxysourcesid0.4.15-15not yet assignedNot reported[971394]
Debianlibproxysourceforky0.4.15-15not yet assignedNot reported[971394]
Debianlibproxysourcetrixie0.4.15-15not yet assignedNot reported[971394]
Debianlibproxysourcebookworm0.4.15-15not yet assignedNot reported[971394]
Ubuntulibproxydeb16.040.4.11-5ubuntu1.1Not reportedUBUNTU-CVE-2020-25219Not reported
Ubuntulibproxydeb18.040.4.15-1ubuntu0.1Not reportedUBUNTU-CVE-2020-25219Not reported
Ubuntulibproxydeb20.040.4.15-10ubuntu1.1Not reportedUBUNTU-CVE-2020-25219Not reported
Ubuntulibproxydeb16.040.4.11-5ubuntu1.1Not reportedUSN-4514-1Not reported
Ubuntulibproxydeb18.040.4.15-1ubuntu0.1Not reportedUSN-4514-1Not reported
Ubuntulibproxydeb20.040.4.15-10ubuntu1.1Not reportedUSN-4514-1Not reported
Suselibproxyrpmlinux enterprise module for basesystem 15 sp10.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxyrpmlinux enterprise module for basesystem 15 sp20.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise module for development tools 15 sp10.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise module for development tools 15 sp20.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxyrpmlinux enterprise high performance computing 15-espos0.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise high performance computing 15-espos0.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxyrpmlinux enterprise high performance computing 15-ltss0.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise high performance computing 15-ltss0.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxyrpmlinux enterprise server 15-ltss0.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server 15-ltss0.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxyrpmlinux enterprise server for sap applications 150.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server for sap applications 150.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise workstation extension 15 sp10.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Suselibproxy-pluginsrpmlinux enterprise workstation extension 15 sp20.4.15-4.3.1Not reportedSUSE-SU-2020:2901-1Not reported
Opensuselibproxyrpmleap 15.10.4.15-lp151.4.3.1Not reportedOPENSUSE-SU-2020:1676-1Not reported
Opensuselibproxy-pluginsrpmleap 15.10.4.15-lp151.4.3.1Not reportedOPENSUSE-SU-2020:1676-1Not reported
Suselibproxyrpmhpe helion openstack 80.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmhpe helion openstack 80.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmopenstack cloud 70.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmopenstack cloud 70.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmopenstack cloud 80.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmopenstack cloud 80.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmopenstack cloud 90.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmopenstack cloud 90.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmopenstack cloud crowbar 80.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmopenstack cloud crowbar 80.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmopenstack cloud crowbar 90.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmopenstack cloud crowbar 90.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server for sap applications 12 sp20.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server for sap applications 12 sp20.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server for sap applications 12 sp30.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server for sap applications 12 sp30.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server for sap applications 12 sp40.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server for sap applications 12 sp40.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise software development kit 12 sp50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server 12 sp2-ltss0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server 12 sp2-ltss0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server 12 sp2-bcl0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server 12 sp2-bcl0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server 12 sp3-ltss0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server 12 sp3-ltss0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server 12 sp3-bcl0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server 12 sp3-bcl0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server 12 sp4-ltss0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server 12 sp4-ltss0.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server 12 sp50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server 12 sp50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmlinux enterprise server for sap applications 12 sp50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise server for sap applications 12 sp50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmlinux enterprise workstation extension 12 sp50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxyrpmenterprise storage 50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Suselibproxy-pluginsrpmenterprise storage 50.4.13-18.3.1Not reportedSUSE-SU-2020:2900-1Not reported
Opensuselibproxyrpmtumbleweed0.4.17-2.2Not reportedOPENSUSE-SU-2024:10973-1Not reported
Opensuselibproxyrpmleap 15.20.4.15-lp152.5.3.1Not reportedOPENSUSE-SU-2020:1680-1Not reported
Opensuselibproxy-pluginsrpmleap 15.20.4.15-lp152.5.3.1Not reportedOPENSUSE-SU-2020:1680-1Not reported

[Debian bug #971394]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • Source package: [libproxy]

    Details (2)
    • 0.4.18-1.2 · all · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · all · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

[Debian 13 (Trixie)]

  • Source package: [libproxy]

    Details (2)
    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • Source package: [libproxy]

    Details (2)
    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • Source package: [libproxy]

    Details (2)
    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • Source package: [libproxy]

    Details (2)
    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • Source package: [libproxy]

    Details (2)
    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • Source package: [libproxy]

    Details (2)
    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • Source package: [libproxy]

    Details (2)
    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

Observed:

References