Rofl0R · Proxychains-Ng · CVE-2025-34451
**Name of the Vulnerable Software and Affected Versions**
rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7
**Description**
The software contains a stack-based buffer overflow in the `proxy from string()` function, located in src/libproxychains.c. This occurs when parsing proxy configuration entries with excessively long `username` or `password` fields. The application may write beyond the bounds of stack buffers, potentially causing memory corruption or crashes. This may lead to denial of service and, depending on the environment, could be leveraged for further exploitation.
**Recommendations**
Update to a version after commit cc005b7.