Null-Pointer Dereference Vulnerability in Privoxy Network Proxy Software
CVE-2021-20274

7.5HIGH

Key Information:

Vendor

Privoxy

Status
Vendor
CVE Published:
9 March 2021

What is CVE-2021-20274?

A vulnerability has been identified in Privoxy versions prior to 3.0.32, where a NULL-pointer dereference may occur, potentially leading to crashes. This issue arises when the SOCKS server behaves incorrectly, causing the application to mismanage memory references. Users of Privoxy are urged to upgrade to the latest version to mitigate this risk and ensure ongoing stability and security.

Affected Version(s)

privoxy privoxy 3.0.32

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.