USN-4886-1: Privoxy vulnerabilities

It was discovered that Privoxy incorrectly handled CGI requests. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2020-35502, CVE-2021-20209, CVE-2021-20210, CVE-2021-20213, CVE-2021-20215, CVE-2021-20216, CVE-2021-20217, CVE-2021-20272,...

openSUSE Security Update : privoxy (openSUSE-2021-443)

This update for privoxy fixes the following issues : Update to version 3.0.32 : - Security/Reliability boo1183129 - ssplit: Remove an assertion that could be triggered with a crafted CGI request. Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272 Reported by: Joshua Rogers Opera - cgisendbanne...

[SECURITY] [DLA 2587-1] privoxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2587-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 09, 2021 https://wiki.debian.org/LTS -...

CVE-2021-20276

creationtimestamp| type| source ---|---|--- 2021-03-09 16:51:45+00:00| seen| https://t.me/cibsecurity/24594...

CVE-2021-20276

The CVE-2021-20276 issue affects Privoxy and is due to invalid memory access when an invalid pattern is passed to pcre_compile() (obsolete PCRE code). This can lead to a Denial of Service. The issue is addressed in the Privoxy 3.0.32 update (openSUSE/Gentoo/GNU advisories reference CVE-2021-20276...

CVE-2021-20276

A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcrecompile may lead to denial of service...