Critical
Security advisory
webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-14495
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:35 UTC · Revision 1
Source evidence
webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.
osv:CVE-2019-14495
Complete source record
{
"id": "6d2fbd6221e113bef601a97b7c453b3e202bd49609d8a94de8584df3a2c57e92",
"url": "https://osv.dev/vulnerability/CVE-2019-14495",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-14495",
"summary": "webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.",
"evidence": "osv:CVE-2019-14495",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2019-14495",
"aliases": [
"CVE-2019-14495"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/3proxy/3proxy",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "e85b064b52296502a1dab648988a56e510088b76"
},
{
"fixed": "3b67dc844789dc0f00e934270c7b349bcb547865"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:3proxy:3proxy:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.8.13"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "3b67dc844789dc0f00e934270c7b349bcb547865"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "e85b064b52296502a1dab648988a56e510088b76"
}
],
"source": "REFERENCES_TAG",
"original_tag": "0.8.13"
}
]
}
}
],
"versions": [
"0.8.12",
"0.8.11",
"0.8.10",
"0.8.9",
"3proxy-0.8.8",
"0.8.8",
"3proxy-0.8.7",
"3proxy-0.8.6",
"3proxy-0.8.5",
"3proxy-0.8.4",
"3proxy-0.8.3",
"3proxy-0.8.2",
"3proxy-0.7.1.3",
"3proxy-0.8.1",
"3proxy-0.8.0",
"3proxy-0.8-pre",
"3proxy-0.7.1.2",
"v0.7.1.2",
"v0.7.1.1",
"v0.7"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-14495.json",
"vanir_signatures": [
{
"id": "CVE-2019-14495-2872691d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"127768421914973899218546243042197874129",
"29060375423216549908681885074263504072",
"119876777576035990165008280972500732173",
"106774345074854783689833012727566124693",
"103805909579956463689798760636788808352",
"50725743884539298149319303701157975583",
"100640603484995227774553218562697359396",
"328114477739613234701543637603756926292",
"895114503199479966534778104785359878",
"76713869271852178726653754057249631153",
"142777377449627105947557336857881348103",
"235685554124215784836209394507153022145",
"118705181836369420497584416709477858949",
"49901716063177566288473566728539661718",
"201432986037321414313637688674292554692",
"160082362534084328556137810264995947840",
"206392131495479154229346771546176467025",
"308298185488624876856089463623974061873",
"154502087882558162466032747496853353011",
"73091997364751339483207896138933355455",
"310131774898713597812580103111513497826",
"259460718410567222268910691180173050298",
"307526625869717560587903359458013181",
"302564368172755372579896608690796886138",
"273868032861629205248688198269077638141",
"54878734815227679039727454483572741948",
"221600397476901568537532683550279123605",
"257763994272065668241065096225107908757",
"293061215989372193354573207788772339201",
"274842800651310200274656377596774009244",
"61195699671025303387403749693001580510",
"329377536730614851462618396650979507846",
"114304876284113181360119356537607275841"
]
},
"source": "https://github.com/3proxy/3proxy/commit/3b67dc844789dc0f00e934270c7b349bcb547865",
"target": {
"file": "src/webadmin.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-14495-6b91e63e",
"digest": {
"length": 7094,
"function_hash": "39101869405426329344851802789041308192"
},
"source": "https://github.com/3proxy/3proxy/commit/3b67dc844789dc0f00e934270c7b349bcb547865",
"target": {
"file": "src/webadmin.c",
"function": "adminchild"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:56:01Z"
}
}
],
"modified": "2026-10-20T13:56:01.385399852Z",
"provider": "osv",
"references": [
"https://github.com/z3APA3A/3proxy/releases/tag/0.8.13",
"https://github.com/z3APA3A/3proxy/commit/3b67dc844789dc0f00e934270c7b349bcb547865",
"https://github.com/z3APA3A/3proxy/compare/0.8.12...0.8.13"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2019-14495",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388398,
"published_at": "2019-08-01T17:15:13.733+00:00"
}