CVE-2012-4504

Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
libproxy_projectlibproxy
0.4.0
libproxy_projectlibproxy
0.4.1
libproxy_projectlibproxy
0.4.2
libproxy_projectlibproxy
0.4.3
libproxy_projectlibproxy
0.4.5
libproxy_projectlibproxy
0.4.6
libproxy_projectlibproxy
0.4.7
libproxy_projectlibproxy
0.4.8
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libproxy
bookworm
0.4.18-1.2
fixed
bullseye
0.4.17-1
fixed
sid
0.5.9-1
fixed
trixie
0.5.9-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libproxy
hardy
dne
lucid
not-affected
natty
not-affected
oneiric
not-affected
precise
Fixed 0.4.7-0ubuntu4.1
released
quantal
Fixed 0.4.7-0ubuntu6
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libproxy-devel
suse enterprise desktop 15
0.4.15-2.15
fixed
suse enterprise desktop 15 SP1
0.4.15-2.15
fixed
suse enterprise desktop 15 SP2
0.4.15-2.15
fixed
suse enterprise sap 15
0.4.15-2.15
fixed
suse enterprise sap 15 SP1
0.4.15-2.15
fixed
suse enterprise sap 15 SP2
0.4.15-2.15
fixed
suse enterprise server 15
0.4.15-2.15
fixed
suse enterprise server 15 SP1
0.4.15-2.15
fixed
suse enterprise server 15 SP2
0.4.15-2.15
fixed
libproxy1
suse enterprise desktop 15
0.4.15-2.15
fixed
suse enterprise desktop 15 SP1
0.4.15-2.15
fixed
suse enterprise desktop 15 SP2
0.4.15-2.15
fixed
suse enterprise sap 12 SP5
0.4.13-16.3
fixed
suse enterprise sap 15
0.4.15-2.15
fixed
suse enterprise sap 15 SP1
0.4.15-2.15
fixed
suse enterprise sap 15 SP2
0.4.15-2.15
fixed
suse enterprise server 12
0.4.11-11.2
fixed
suse enterprise server 12 SP1
0.4.11-11.2
fixed
suse enterprise server 12 SP2
0.4.13-16.3
fixed
suse enterprise server 12 SP3
0.4.13-16.3
fixed
suse enterprise server 12 SP4
0.4.13-16.3
fixed
suse enterprise server 12 SP5
0.4.13-16.3
fixed
suse enterprise server 15
0.4.15-2.15
fixed
suse enterprise server 15 SP1
0.4.15-2.15
fixed
suse enterprise server 15 SP2
0.4.15-2.15
fixed
libproxy1-32bit
suse enterprise sap 12 SP5
0.4.13-16.3
fixed
suse enterprise server 12
0.4.11-11.2
fixed
suse enterprise server 12 SP1
0.4.11-11.2
fixed
suse enterprise server 12 SP2
0.4.13-16.3
fixed
suse enterprise server 12 SP3
0.4.13-16.3
fixed
suse enterprise server 12 SP4
0.4.13-16.3
fixed
suse enterprise server 12 SP5
0.4.13-16.3
fixed
libproxy1-config-gnome3
suse enterprise desktop 15
0.4.15-2.42
fixed
suse enterprise desktop 15 SP1
0.4.15-2.42
fixed
suse enterprise desktop 15 SP2
0.4.15-2.42
fixed
suse enterprise sap 12 SP5
0.4.13-16.6
fixed
suse enterprise sap 15
0.4.15-2.42
fixed
suse enterprise sap 15 SP1
0.4.15-2.42
fixed
suse enterprise sap 15 SP2
0.4.15-2.42
fixed
suse enterprise server 12
0.4.11-11.6
fixed
suse enterprise server 12 SP1
0.4.11-11.6
fixed
suse enterprise server 12 SP2
0.4.13-16.6
fixed
suse enterprise server 12 SP3
0.4.13-16.6
fixed
suse enterprise server 12 SP4
0.4.13-16.6
fixed
suse enterprise server 12 SP5
0.4.13-16.6
fixed
suse enterprise server 15
0.4.15-2.42
fixed
suse enterprise server 15 SP1
0.4.15-2.42
fixed
suse enterprise server 15 SP2
0.4.15-2.42
fixed
suse enterprise workstation 15
0.4.15-2.42
fixed
suse enterprise workstation 15 SP1
0.4.15-2.42
fixed
suse enterprise workstation 15 SP2
0.4.15-2.42
fixed
libproxy1-config-gnome3-32bit
suse enterprise sap 12 SP5
0.4.13-16.6
fixed
suse enterprise server 12
0.4.11-11.6
fixed
suse enterprise server 12 SP1
0.4.11-11.6
fixed
suse enterprise server 12 SP2
0.4.13-16.6
fixed
suse enterprise server 12 SP3
0.4.13-16.6
fixed
suse enterprise server 12 SP4
0.4.13-16.6
fixed
suse enterprise server 12 SP5
0.4.13-16.6
fixed
libproxy1-networkmanager
suse enterprise desktop 15
0.4.15-2.42
fixed
suse enterprise desktop 15 SP1
0.4.15-2.42
fixed
suse enterprise desktop 15 SP2
0.4.15-2.42
fixed
suse enterprise sap 12 SP5
0.4.13-16.6
fixed
suse enterprise sap 15
0.4.15-2.42
fixed
suse enterprise sap 15 SP1
0.4.15-2.42
fixed
suse enterprise sap 15 SP2
0.4.15-2.42
fixed
suse enterprise server 12
0.4.11-11.6
fixed
suse enterprise server 12 SP1
0.4.11-11.6
fixed
suse enterprise server 12 SP2
0.4.13-16.6
fixed
suse enterprise server 12 SP3
0.4.13-16.6
fixed
suse enterprise server 12 SP4
0.4.13-16.6
fixed
suse enterprise server 12 SP5
0.4.13-16.6
fixed
suse enterprise server 15
0.4.15-2.42
fixed
suse enterprise server 15 SP1
0.4.15-2.42
fixed
suse enterprise server 15 SP2
0.4.15-2.42
fixed
suse enterprise workstation 15
0.4.15-2.42
fixed
suse enterprise workstation 15 SP1
0.4.15-2.42
fixed
suse enterprise workstation 15 SP2
0.4.15-2.42
fixed
libproxy1-pacrunner-webkit
suse enterprise sap 12 SP5
0.4.13-16.6
fixed
suse enterprise server 12 SP2
0.4.13-16.6
fixed
suse enterprise server 12 SP3
0.4.13-16.6
fixed
suse enterprise server 12 SP4
0.4.13-16.6
fixed
suse enterprise server 12 SP5
0.4.13-16.6
fixed
Common Weakness Enumeration
References
http://code.google.com/p/libproxy/source/detail?r=853
http://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html
http://secunia.com/advisories/51048
http://www.openwall.com/lists/oss-security/2012/10/12/1
http://www.openwall.com/lists/oss-security/2012/10/12/5
http://www.openwall.com/lists/oss-security/2012/10/16/3
http://www.securityfocus.com/bid/55909
http://www.ubuntu.com/usn/USN-1629-1
https://bugzilla.redhat.com/show_bug.cgi?id=864417
https://exchange.xforce.ibmcloud.com/vulnerabilities/79249
https://groups.google.com/forum/?fromgroups=#%21topic/libproxy/VxZ8No7mT0E
http://code.google.com/p/libproxy/source/detail?r=853
http://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html
http://secunia.com/advisories/51048
http://www.openwall.com/lists/oss-security/2012/10/12/1
http://www.openwall.com/lists/oss-security/2012/10/12/5
http://www.openwall.com/lists/oss-security/2012/10/16/3
http://www.securityfocus.com/bid/55909
http://www.ubuntu.com/usn/USN-1629-1
https://bugzilla.redhat.com/show_bug.cgi?id=864417
https://exchange.xforce.ibmcloud.com/vulnerabilities/79249
https://groups.google.com/forum/?fromgroups=#%21topic/libproxy/VxZ8No7mT0E