CVE-2019-14495: Critical severity 3proxy vulnerability
Published Aug 1, 2019
·Updated
webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.
Affected Software
1 affected component
3proxy 3proxy<0.8.13
Remediation
Patch Available
Event History
Aug 1, 2019
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments are affected?
3proxy versions before 0.8.13 are affected. The issue is in the admin interface, so exposure depends on whether that interface is enabled and reachable.
2
Does exploitation require authentication or user interaction?
The supplied CVSS vector indicates no privileges and no user interaction are required. It also indicates network-based attack access with low attack complexity.
3
What is the recommended remediation?
Upgrade 3proxy to version 0.8.13 or later, which includes the available patch.