CVE-2020-25219: High severity Libproxy Project Libproxy vulnerability
Last updated 25 August 2025
Other sources
libproxy is vulnerable to a denial of service, caused by an uncontrolled recursion in url::recvline in url.cpp. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause stack exhaustion.
— IBM
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25219?
CVE-2020-25219 has a high severity rating due to its potential to cause denial of service through stack exhaustion.
How do I fix CVE-2020-25219?
To mitigate CVE-2020-25219, upgrade to libproxy version 0.4.17-1 or later, depending on your distribution.
What software is affected by CVE-2020-25219?
CVE-2020-25219 affects libproxy versions 0.4.x up to 0.4.15, along with some IBM QRadar products running specific versions.
What happens if CVE-2020-25219 is exploited?
Exploitation of CVE-2020-25219 can lead to a denial of service, rendering the affected service unresponsive.
Is there a workaround for CVE-2020-25219?
A temporary workaround for CVE-2020-25219 may include restricting access to the affected service until a patch is applied.