CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite…

published September 9, 2020

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04367 · 91.2th percentile
Published
2020-09-09T20:30Z
EPSS history
Timeline
  • 09 SEP 20:30Z
    url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite…
    cvelistv5