CVE-2025-34451

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxy_from_string() located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password fields, the application may write beyond the bounds of fixed-size stack buffers, leading to memory corruption or crashes. This vulnerability may allow denial of service and, under certain conditions, could be leveraged for further exploitation depending on the execution environment and applied mitigations.

• CWE-121
• CWE-787

• https://github.com/httpsgithu/proxychains-ng/commit/cc005b7Patch
• https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-008-proxychains-ng-stack-buffer-overflow-proxy_from_string.mdExploit, Third Party Advisory
• https://github.com/rofl0r/proxychains-ng/issues/606Exploit, Patch
• https://www.vulncheck.com/advisories/rofl0r-proxychains-ng-stack-based-buffer-overflowThird Party Advisory
• https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-008-proxychains-ng-stack-buffer-overflow-proxy_from_string.mdExploit, Third Party Advisory

Published

Dec 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34446Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34447Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34448Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34449Genymobile/scrcpy versions up to and including 3.3.3, prior …9.1
• CVE-2025-3445A Path Traversal "Zip Slip" vulnerability has been identifie…8.1
• CVE-2025-34450merbanan/rtl_433 versions up to and including 25.02 and prio…7.8
• CVE-2025-34452Streama versions 1.10.0 through 1.10.5 and prior to commit b…8.7
• CVE-2025-34453Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34454Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34455Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34456Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34457wb2osz/direwolf (Dire Wolf) versions up to and including 1.8…8.7