CVE catalog

CVE-2020-26154

libproxy: CVE-2020-26154

[CVE catalog]

Severity
High · CVSS 8CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.56% · Oct 25, 2026

A vulnerability was found in libproxy, where a buffer overflow can occur if a server serving a PAC file sends more than 102400 bytes without a Content-Length header, this flaw allows an attacker to trigger an overflow of PAC_HTTP_BLOCK_SIZE (512 bytes), potentially leading to application crashes or unexpected behavior when processing large PAC files. libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow This vulnerability is rated as moderate because libproxy can overflow its buffer by PAC_HTTP_BLOCK_SIZE (512 bytes) if a server serving a PAC file sends more than 102400 bytes without a Content-Length header, specific conditions related to PAC file handling, and while it could lead to crashes or unexpected behavior, its overall impact is limited. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibproxysid0.5.12-3fixed
Debianlibproxyforky0.5.12-3fixed
Debianlibproxytrixie0.5.9-1fixed
Debianlibproxybookworm0.4.18-1.2fixed
Ubuntulibproxy16.040.4.11-4ubuntu3~gcc5.3vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1.1vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1.2fixed
Ubuntulibproxy18.040.4.14-3vulnerable
Ubuntulibproxy18.040.4.15-0ubuntu1vulnerable
Ubuntulibproxy18.040.4.15-1vulnerable
Ubuntulibproxy18.040.4.15-1ubuntu0.1vulnerable
Ubuntulibproxy18.040.4.15-1ubuntu0.2fixed
Ubuntulibproxy20.040.4.15-7vulnerable
Ubuntulibproxy20.040.4.15-9vulnerable
Ubuntulibproxy20.040.4.15-9build1vulnerable
Ubuntulibproxy20.040.4.15-9ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1.1vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1.2fixed
Ubuntulibproxy16.040.4.11-4ubuntu3~gcc5.3vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1.1vulnerable
Ubuntulibproxy16.040.4.11-5ubuntu1.2fixed
Ubuntulibproxy18.040.4.14-3vulnerable
Ubuntulibproxy18.040.4.15-0ubuntu1vulnerable
Ubuntulibproxy18.040.4.15-1vulnerable
Ubuntulibproxy18.040.4.15-1ubuntu0.1vulnerable
Ubuntulibproxy18.040.4.15-1ubuntu0.2fixed
Ubuntulibproxy20.040.4.15-7vulnerable
Ubuntulibproxy20.040.4.15-9vulnerable
Ubuntulibproxy20.040.4.15-9build1vulnerable
Ubuntulibproxy20.040.4.15-9ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1.1vulnerable
Ubuntulibproxy20.040.4.15-10ubuntu1.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibproxysourcesid0.4.15-15not yet assignedNot reported[968366]
Debianlibproxysourceforky0.4.15-15not yet assignedNot reported[968366]
Debianlibproxysourcetrixie0.4.15-15not yet assignedNot reported[968366]
Debianlibproxysourcebookworm0.4.15-15not yet assignedNot reported[968366]
Ubuntulibproxydeb16.040.4.11-5ubuntu1.2Not reportedUBUNTU-CVE-2020-26154Not reported
Ubuntulibproxydeb18.040.4.15-1ubuntu0.2Not reportedUBUNTU-CVE-2020-26154Not reported
Ubuntulibproxydeb20.040.4.15-10ubuntu1.2Not reportedUBUNTU-CVE-2020-26154Not reported
Ubuntulibproxydeb16.040.4.11-5ubuntu1.2Not reportedUSN-4673-1Not reported
Ubuntulibproxydeb18.040.4.15-1ubuntu0.2Not reportedUSN-4673-1Not reported
Ubuntulibproxydeb20.040.4.15-10ubuntu1.2Not reportedUSN-4673-1Not reported

[Debian bug #968366]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libproxy1-plugin-gsettings]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • [libproxy1-plugin-kconfig]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • [libproxy1-plugin-networkmanager]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • [libproxy1-plugin-webkit]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • [libproxy1v5]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • [libproxy-dev]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • [libproxy-tools]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · amd64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · arm64 · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

  • [python3-libproxy]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.4.18-1.2 · all · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

    • 0.4.18-1.2 · all · bookworm

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · bookworm; dsa · libproxy · debian · 12

[Debian 13 (Trixie)]

  • [libproxy1-plugin-gsettings]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • [libproxy1-plugin-kconfig]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • [libproxy1-plugin-networkmanager]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • [libproxy1-plugin-webkit]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • [libproxy1v5]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • [libproxy-dev]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

  • [libproxy-tools]Fixed

    Source package: [libproxy]

    Details (2)

    • 0.5.9-1 · amd64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

    • 0.5.9-1 · arm64 · trixie

      Fixed · Fixed: 0.4.15-15

      dsa · libproxy · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]