Denial of Service Vulnerability in Privoxy by Privoxy Team
CVE-2021-20276

7.5HIGH

Key Information:

Vendor

Privoxy

Status
Vendor
CVE Published:
9 March 2021

What is CVE-2021-20276?

A memory access flaw has been identified in versions of Privoxy prior to 3.0.32, where improper handling of specific patterns in the pcre_compile() function can lead to a potential denial of service. This vulnerability can compromise the stability and performance of the application, necessitating immediate attention and updates to mitigate potential impacts on users.

Affected Version(s)

privoxy privoxy 3.0.32

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.