Approved changes feed: RSS · Atom

cpe:2.3:a:proxychains-ng_project:proxychains-ng:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProxychains Ng Project (b85c59f4-096f-5a56-b337-d0d420a22e7a)
ProductProxychains Ng (b945e786-6cd0-55a2-8653-10bec27f253d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/proxychains-ng purl2cpe 2026-06-01 10:11:30.113163
pkg:deb/ubuntu/proxychains-ng purl2cpe 2026-06-01 10:11:30.113166
pkg:github/rofl0r/proxychains-ng purl2cpe 2026-06-01 10:11:30.113169
pkg:rpm/fedora/proxychains-ng purl2cpe 2026-06-01 10:11:30.113172
pkg:rpm/opensuse/proxychains-ng purl2cpe 2026-06-01 10:11:30.113174
pkg:sourceforge/proxychains-ng purl2cpe 2026-06-01 10:11:30.113177

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-34451 vulnerable 2026-06-08 07:20:59.606032 rofl0r/proxychains-ng <= 4.17 Stack-based Buffer Overflow
rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxy_from_string() located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password fields, the application may write beyond the bounds of fixed-size stack buffers, leading to memory corruption or crashes. This vulnerability may allow denial of service and, under certain conditions, could be leveraged for further exploitation depending on the execution environment and applied mitigations.
Published: 2025-12-18T21:16:18.730Z
Updated: 2026-05-14T02:08:49.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3887 vulnerable 2026-06-08 05:06:38.709194 Details available
Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.
Published: 2017-09-21T16:00:00.000Z
Updated: 2024-08-06T05:56:16.112Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.