proxychains-ng project proxychains-ng vulnerabilities

Latest proxychains-ng project proxychains-ng CVEs

Newest publication first

1. CVE-2025-34451 rofl0r/proxychains-ng <= 4.17 Stack-based Buffer Overflow

   Published 2025-12-18

   Medium·CVSS 6.9 EPSS 0.27%

   rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxy_from_string() located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long use...

2. CVE-2015-3887 Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenc...

   Published 2017-09-21

   High·CVSS 7.8 EPSS 0.49%

   Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.