Threats affecting pkg:github/3proxy

3proxy versions 0.9.7 through 1.0.1 contain a vulnerability where uninitialized stack memory can be disclosed via the SOCKS4 reply path when the external-NAT option (-Ne) is enabled. This allows unauthenticated attackers to leak stack bytes, including high bytes of a userspace pointer, which weakens ASLR protections. The issue is fixed in a commit identified as 206c923.