3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS4
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option (-Ne) is configured. Attackers can send a client probe that fails the SOCKS version check to trigger a reply containing uninitialized bytes from the sin structure, exposing high bytes of a userspace pointer that weakens ASLR protections.
CVE-2026-109438
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-109438
3proxy
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/3proxy/3proxy",
"vendor": "3proxy",
"product": "3proxy",
"versions": [
{
"status": "affected",
"version": "0.9.7",
"versionType": "semver",
"lessThanOrEqual": "1.0.1"
},
{
"status": "unaffected",
"version": "206c923d6cd433bd2e7196375442650c328b8bfa",
"versionType": "git"
}
],
"packageURL": "pkg:github/3proxy/3proxy",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-109438
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #30085 · Revision 1
- Added to Heist Feed
- Publisher date