CVE-2021-20273: Improper Input Validation

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

CVE-2021-20275: Improper Restriction of Operations within the Bounds of a Memory Buffer

A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunkedbodyiscomplete leading to denial of service...

CVE-2021-20276

A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcrecompile may lead to denial of service...

CVE-2021-20276: Improper Restriction of Operations within the Bounds of a Memory Buffer

A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcrecompile may lead to denial of service...

PT-2021-13864 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw was found in the software, allowing an assertion failure to be triggered with a crafted CGI request, leading to a server crash. This issue can be exploited by attackers to cause a denial of...

PT-2021-13865 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw was found in the software, which can cause a crash via a crafted CGI request if it is toggled off. Recommendations: For versions prior to 3.0.32, update to version 3.0.32 or later to resolv...

PT-2021-13866 · Privoxy +2 · Privoxy +2

Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw was found in the software, which may cause a crash due to a NULL-pointer dereference when the socks server misbehaves. Recommendations: For versions prior to 3.0.32, update to version 3.0.3...

PT-2021-13867 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw in the software may cause an invalid read of size two in the chunked body is complete function, leading to a denial of service. Recommendations: For versions prior to 3.0.32, update to...

PT-2021-13868 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw was found in the software, where invalid memory access with an invalid pattern passed to the pcre compile function may lead to denial of service. Recommendations: For versions prior to...

DLA-2587-1 privoxy - security update

Bulletin has no description...

Denial Of Service (DoS)

privoxy is vulnerable to denial of service DoS attacks. An attacker could cause an application crash via a crafted CGI request with invalid image types resulting in denial of service conditions...

Denial Of Service (DoS)

privoxy is vulnerable to denial of service DoS. The vulnerability exists through an assertion when parsing a CGI request...

Denial Of Service (DoS)

privoxy is vulnerable to denial of service, A NULL-pointer dereference occurs when the SOCKS server misbehaves, resulting in an application crash...

Arbitrary Code Execution

privoxy is vulnerable to arbitrary code execution. Invalid memory access in 'pcrecompile' via obsolete PCRE code may allow an attacker to trigger code execution...

Denial Of Service (DoS)

privoxy is vulnerable to denial of service DoS. The vulnerability exists through the chunkedbodyiscomplete where an invalid read of size two can occur...

MGASA-2021-0089 Updated privoxy package fixes security vulnerabilities

Fixed a memory leak when decompression fails "unexpectedly". CVE-2021-20216 Prevent an assertion from getting triggered by a crafted CGI request. CVE-2021-20217...

Updated privoxy package fixes security vulnerabilities

Fixed a memory leak when decompression fails "unexpectedly". CVE-2021-20216 Prevent an assertion from getting triggered by a crafted CGI request. CVE-2021-20217...

OPENSUSE-SU-2021:0279-1 Security update for privoxy

This update for privoxy fixes the following issues: - Update to version 3.0.31: - Security/Reliability boo1181650 - Prevent an assertion from getting triggered by a crafted CGI request. Commit 5bba5b89193fa. OVE-20210130-0001. CVE-2021-20217 Reported by: Joshua Rogers Opera - Fixed a memory leak...

Security update for privoxy (moderate)

openSUSE Security Update: Security update for privoxy Announcement ID: openSUSE-SU-2021:0279-1 Rating: moderate References: 1181650 Cross-References: CVE-2021-20216 CVE-2021-20217 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes two vulnerabilities is now available...

[SECURITY] Fedora 32 Update: privoxy-3.0.31-1.fc32

Privoxy is a web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk. Privoxy has a very flexible configuration and can be customized to suit...