| Package | Affected versions | Patched versions |
|---|---|---|
| stunnel | = 4.21= 4.22= 4.23= 4.24= 4.25= 4.26= 4.27= 4.28= 4.29= 4.30= 4.31= 4.32= 4.33= 4.34= 4.35= 4.36= 4.37= 4.38= 4.39= 4.40= 4.41= 4.42= 4.43= 4.44= 4.45= 4.46= 4.47= 4.48= 4.49= 4.50= 4.51= 4.52= 4.53≤ 4.54 |
stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free