CVE-2020-26154 – url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26154

Reference (s):

• DEBIAN:DSA-4800
• URL: https://www.debian.org/security/2020/dsa-4800
• FEDORA:FEDORA-2020-15b775b07e
• URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/3BID3HVHAF6DA3YJOFDBSAZSMR3ODNIW/
• FEDORA:FEDORA-2020-941b563a80