Assertion Failure Vulnerability in Privoxy Before 3.0.32
CVE-2021-20272

7.5HIGH

Key Information:

Vendor: Privoxy
Status: Privoxy
Vendor: CVE Published:; 9 March 2021

🔔 Create Privoxy Vulnerability Alert

What is CVE-2021-20272?

A vulnerability has been identified in Privoxy, where an assertion failure can be exploited by sending a specially crafted CGI request. This may result in a server crash, impacting its availability and functionality. Users are encouraged to update to the latest version to mitigate this risk.

Affected Version(s)

privoxy privoxy 3.0.32

References

https://bugzilla.redhat.com/show_bug.cgi?id=1936651

x_refsource_MISC

https://www.privoxy.org/announce.txt

x_refsource_MISC

https://lists.debian.org/debian-lts-announce/2021/03/msg0...

mailing-listx_refsource_MLIST

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 9, 2021
Vulnerability Reserved
Dec 17, 2020

CVE-2021-20272 Data

.