GLSA-202107-16 : Privoxy: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-16 Privoxy: Multiple vulnerabilities Multiple vulnerabilities have been discovered in privoxy. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a possible Denial of Service...

Fuzzing HTTP Proxies: Privoxy, Part 3

Research Fuzzing HTTP Proxies: Privoxy, Part 3 Share January 4th, 2022 One of my earlier posts outlined how I had discovered six security vulnerabilities in the Privoxy software using the technique of fuzzing to cause the software to crash. This post outlines how I discovered three more...

openSUSE 15 Security Update : privoxy (openSUSE-SU-2021:1646-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1646-1 advisory. - A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

Security update for privoxy (important)

openSUSE Security Update: Security update for privoxy Announcement ID: openSUSE-SU-2021:1646-1 Rating: important References: 1193584 Cross-References: CVE-2021-44540 CVE-2021-44541 CVE-2021-44542 CVE-2021-44543 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 An update that fix...

OPENSUSE-SU-2021:1646-1 Security update for privoxy

This update for privoxy fixes the following issues: privoxy was updated to 3.0.33 boo1193584: CVE-2021-44543: Encode the template name to prevent XSS cross-side scripting when Privoxy is configured to servce the user-manual itself CVE-2021-44540: Free memory of compiled pattern spec before bailin...

CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

DEBIAN-CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

ALPINE-CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

ALPINE-CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

DEBIAN-CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

DEBIAN-CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

ALPINE-CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

ALPINE-CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...