CVE-2020-20216

CVE-2020-20216 affects MikroTik RouterOS 6.44.6 (long-term tree). The vulnerability is a memory corruption in the "/nova/bin/graphing" process that enables an authenticated remote attacker to cause a Denial of Service via a NULL pointer dereference. Exploitation requires authentication; the entry...

CVE-2021-20216

CVE-2021-20216 affects Privoxy prior to 3.0.31. A memory leak occurs when decompression fails unexpectedly, which may lead to a denial of service and impact availability. The issue is documented across multiple sources showing Privoxy versions before 3.0.31 are affected. Remediation per advisorie...

USN-4886-1: Privoxy vulnerabilities

It was discovered that Privoxy incorrectly handled CGI requests. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2020-35502, CVE-2021-20209, CVE-2021-20210, CVE-2021-20213, CVE-2021-20215, CVE-2021-20216, CVE-2021-20217, CVE-2021-20272,...

MGASA-2021-0089 Updated privoxy package fixes security vulnerabilities

Fixed a memory leak when decompression fails "unexpectedly". CVE-2021-20216 Prevent an assertion from getting triggered by a crafted CGI request. CVE-2021-20217...

Updated privoxy package fixes security vulnerabilities

Fixed a memory leak when decompression fails "unexpectedly". CVE-2021-20216 Prevent an assertion from getting triggered by a crafted CGI request. CVE-2021-20217...

Fedora 32 : privoxy (2021-f08e89a0d5)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-f08e89a0d5 advisory. - A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of...

CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2020-1880)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-20216

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi in /htdocs/cgibin, because REMOTEPORT is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an...

CVE-2019-20216

CVE-2019-20216 affects D-Link DIR-859 routers (versions 1.05 and 1.06B01 Beta01). The flaw resides in ssdpcgi() handling of M-SEARCH requests and is triggered by the urn: to the M-SEARCH path, with REMOTE_PORT mishandled. The urn: service/device value is checked with strstr, enabling an attacker ...

CVE-2018-20216

CVE-2018-20216 : In QEMU, an infinite loop can occur in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked and -1 is mishandled. This is the only detail provided in the initial description; no explicit exploit details, affected product versions, or mitigations are included here. ...