CVE-2013-1762

Publication date 8 March 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.

Status

Package Ubuntu Release Status
stunnel4 13.10 saucy
Not affected
13.04 raring Ignored end of life
12.10 quantal
Fixed 3:4.53-1ubuntu0.1
12.04 LTS precise
Fixed 3:4.42-1ubuntu0.1
11.10 oneiric Ignored end of life
10.04 LTS lucid
Fixed 3:4.29-1+squeeze1build0.10.04.1
8.04 LTS hardy Ignored end of life