A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1923256 | Issue Tracking Third Party Advisory |
https://security.gentoo.org/glsa/202107-16 | Third Party Advisory |
https://www.openwall.com/lists/oss-security/2021/01/31/2 | Mailing List Release Notes Third Party Advisory |
https://www.privoxy.org/3.0.31/user-manual/whatsnew.html | Release Notes Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1923256 | Issue Tracking Third Party Advisory |
https://security.gentoo.org/glsa/202107-16 | Third Party Advisory |
https://www.openwall.com/lists/oss-security/2021/01/31/2 | Mailing List Release Notes Third Party Advisory |
https://www.privoxy.org/3.0.31/user-manual/whatsnew.html | Release Notes Vendor Advisory |
Configurations
History
21 Nov 2024, 05:46
Type | Values Removed | Values Added |
---|---|---|
References | () https://bugzilla.redhat.com/show_bug.cgi?id=1923256 - Issue Tracking, Third Party Advisory | |
References | () https://security.gentoo.org/glsa/202107-16 - Third Party Advisory | |
References | () https://www.openwall.com/lists/oss-security/2021/01/31/2 - Mailing List, Release Notes, Third Party Advisory | |
References | () https://www.privoxy.org/3.0.31/user-manual/whatsnew.html - Release Notes, Vendor Advisory |
Information
Published : 2021-03-25 19:15
Updated : 2024-11-21 05:46
NVD link : CVE-2021-20216
Mitre link : CVE-2021-20216
CVE.ORG link : CVE-2021-20216
JSON object : View
Products Affected
privoxy
- privoxy