Denial of Service Vulnerability in Privoxy by Privoxy Team
CVE-2021-20275

7.5HIGH

Key Information:

Vendor: Privoxy
Status: Privoxy
Vendor: CVE Published:; 9 March 2021

🔔 Create Privoxy Vulnerability Alert

What is CVE-2021-20275?

A flaw in Privoxy prior to version 3.0.32 may lead to a denial of service condition due to an invalid read operation in the chunked_body_is_complete() function. This vulnerability can impact the performance and availability of the service, making it critical for users to apply the latest updates to ensure their systems remain secure.

Affected Version(s)

privoxy privoxy 3.0.32

References

https://www.privoxy.org/announce.txt

x_refsource_MISC

https://bugzilla.redhat.com/show_bug.cgi?id=1936666

x_refsource_MISC

https://lists.debian.org/debian-lts-announce/2021/03/msg0...

mailing-listx_refsource_MLIST

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 9, 2021
Vulnerability Reserved
Dec 17, 2020

CVE-2021-20275 Data

.