openSUSE-SU-2020:1676

openSUSE-SU-2020:1680

https://github.com/libproxy/libproxy/issues/134

[debian-lts-announce] 20200912 [SECURITY] [DLA 2372-1] libproxy security update

FEDORA-2020-2407cb0512

FEDORA-2020-f92d372cf1

FEDORA-2020-7e1e9abf77

USN-4514-1

DSA-4800

According to the versions of the libproxy package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - url::recvline in url.cpp in libproxy 0.4.x through     0.4.15 allows a remote HTTP server to trigger     uncontrolled recursion via a response composed of an     infinite stream that lacks a newline character. This     leads to stack exhaustion.(CVE-2020-25219)

  - url.cpp in libproxy through 0.4.15 is prone to a buffer     overflow when PAC is enabled, as demonstrated by a     large PAC file that is delivered without a     Content-length header.(CVE-2020-26154)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libproxy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - url::recvline in url.cpp in libproxy 0.4.x through     0.4.15 allows a remote HTTP server to trigger     uncontrolled recursion via a response composed of an     infinite stream that lacks a newline character. This     leads to stack exhaustion.(CVE-2020-25219)

  - url.cpp in libproxy through 0.4.15 is prone to a buffer     overflow when PAC is enabled, as demonstrated by a     large PAC file that is delivered without a     Content-length header.(CVE-2020-26154)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - url.cpp in libproxy through 0.4.15 is prone to a buffer     overflow when PAC is enabled, as demonstrated by a     large PAC file that is delivered without a     Content-length header.(CVE-2020-26154)

  - url::recvline in url.cpp in libproxy 0.4.x through     0.4.15 allows a remote HTTP server to trigger     uncontrolled recursion via a response composed of an     infinite stream that lacks a newline character. This     leads to stack exhaustion.(CVE-2020-25219)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - url::recvline in url.cpp in libproxy 0.4.x through     0.4.15 allows a remote HTTP server to trigger     uncontrolled recursion via a response composed of an     infinite stream that lacks a newline character. This     leads to stack exhaustion.(CVE-2020-25219)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libproxy fixes the following issues :

CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).

CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two vulnerabilities were discovered in libproxy, an automatic proxy configuration management library, which could result in denial of service, or possibly, execution of arbitrary code.

According to the versions of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libproxy offers the following features:* extremely     small core footprint (< 35K)* no external dependencies     within libproxy core(libproxy plugins may have     dependencies)* only 3 functions in the stable external     API* dynamic adjustment to changing network topology* a     standard way of dealing with proxy settings across all     scenarios* a sublime sense of joy and     accomplishmentSecurity Fix(es):url.cpp in libproxy     through 0.4.15 is prone to a buffer overflow when PAC     is enabled, as demonstrated by a large PAC file that is     delivered without a Content-length     header.(CVE-2020-26154)url::recvline in url.cpp in     libproxy 0.4.x through 0.4.15 allows a remote HTTP     server to trigger uncontrolled recursion via a response     composed of an infinite stream that lacks a newline     character. This leads to stack     exhaustion.(CVE-2020-25219)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libproxy fixes the following issues :

  - CVE-2020-25219: Rewrote url::recvline to be nonrecursive     (bsc#1176410).

  - CVE-2020-26154: Fixed a buffer overflow when PAC is     enabled (bsc#1177143).

This update was imported from the SUSE:SLE-15:Update update project.

According to the version of the libproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libproxy offers the following features: * extremely     small core footprint (< 35K) * no external dependencies     within libproxy core(libproxy plugins may have     dependencies) * only 3 functions in the stable external     API * dynamic adjustment to changing network topology *     a standard way of dealing with proxy settings across     all scenarios * a sublime sense of joy and     accomplishmentSecurity Fix(es):url::recvline in url.cpp     in libproxy 0.4.x through 0.4.15 allows a remote HTTP     server to trigger uncontrolled recursion via a response     composed of an infinite stream that lacks a newline     character. This leads to stack     exhaustion.(CVE-2020-25219)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2020-25219

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4514-1 advisory.

  - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger     uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This     leads to stack exhaustion. (CVE-2020-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that there was a denial of service attack in libproxy, a library to make applications HTTP proxy aware. A remote server could cause an infinite stack recursion.

For Debian 9 'Stretch', this problem has been fixed in version 0.4.14-2+deb9u1.

We recommend that you upgrade your libproxy packages.

For the detailed security status of libproxy please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libproxy

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
147089	EulerOS Virtualization for ARM 64 3.0.6.0 : libproxy (EulerOS-SA-2021-1530)	Nessus	Huawei Local Security Checks	medium
147081	EulerOS Virtualization 3.0.6.6 : libproxy (EulerOS-SA-2021-1490)	Nessus	Huawei Local Security Checks	medium
145127	EulerOS 2.0 SP3 : libproxy (EulerOS-SA-2021-1087)	Nessus	Huawei Local Security Checks	medium
144221	EulerOS 2.0 SP5 : libproxy (EulerOS-SA-2020-2550)	Nessus	Huawei Local Security Checks	medium
143650	SUSE SLES12 Security Update : libproxy (SUSE-SU-2020:2900-1)	Nessus	SuSE Local Security Checks	medium
143612	SUSE SLED15 / SLES15 Security Update : libproxy (SUSE-SU-2020:2901-1)	Nessus	SuSE Local Security Checks	medium
143313	Debian DSA-4800-1 : libproxy - security update	Nessus	Debian Local Security Checks	medium
142262	EulerOS 2.0 SP2 : libproxy (EulerOS-SA-2020-2360)	Nessus	Huawei Local Security Checks	medium
142180	EulerOS 2.0 SP8 : libproxy (EulerOS-SA-2020-2304)	Nessus	Huawei Local Security Checks	medium
141525	openSUSE Security Update : libproxy (openSUSE-2020-1680)	Nessus	SuSE Local Security Checks	medium
141513	openSUSE Security Update : libproxy (openSUSE-2020-1676)	Nessus	SuSE Local Security Checks	medium
141380	EulerOS 2.0 SP9 : libproxy (EulerOS-SA-2020-2183)	Nessus	Huawei Local Security Checks	medium
141141	Fedora 31 : libproxy (2020-7e1e9abf77)	Nessus	Fedora Local Security Checks	medium
140761	Fedora 32 : libproxy (2020-2407cb0512)	Nessus	Fedora Local Security Checks	medium
140643	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : libproxy vulnerability (USN-4514-1)	Nessus	Ubuntu Local Security Checks	medium
140540	Debian DLA-2372-1 : libproxy security update	Nessus	Debian Local Security Checks	medium

CVE-2020-25219

MEDIUM

Description

References

Details

Risk Information

CVSS v2.0

CVSS v3.0

Vulnerable Software

Configuration 1

Configuration 2

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium