摘要:
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
安全等级: Low
公告ID: KylinSec-SA-2022-1639
发布日期: 2022年7月25日
关联CVE: CVE-2020-25219
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
cve名称 | 产品 | 组件 | 是否受影响 |
---|