CVE-2025-34451
rofl0r/proxychains-ng <= 4.17 Stack-based Buffer Overflow
概要
rofl0r/proxychains-ng <= 4.17 Stack-based Buffer Overflow
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxy_from_string() located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password fields, the application may write beyond the bounds of fixed-size stack buffers, leading to memory corruption or crashes. This vulnerability may allow denial of service and, under certain conditions, could be leveraged for further exploitation depending on the execution environment and applied mitigations.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2025-34451 proxychains-ng
- Ubuntu UBUNTU-CVE-2025-34451 proxychains-ng
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- patch github.com
- report github.com
- report github.com