CVE-2021-20276: Invalid memory access with an invalid pattern passed to pcre_compile()

Bug 1936668 (CVE-2021-20276) - CVE-2021-20276 privoxy: Invalid memory access with an invalid pattern passed to pcre_compile()

Summary: CVE-2021-20276 privoxy: Invalid memory access with an invalid pattern passed …

Keywords:

Status:

CLOSED DUPLICATE of bug 1935974

Alias:

CVE-2021-20276

Product:

Security Response

Classification:

Other

Component:

vulnerability

Sub Component:

Version:

unspecified

Hardware:

All

OS:

Linux

Priority:

medium

Severity:

medium

Target Milestone:

—

Assignee:

Red Hat Product Security

QA Contact:

Docs Contact:

URL:

Whiteboard:

Depends On:

Blocks:

TreeView+

depends on / blocked

Reported:

2021-03-08 21:22 UTC by Pedro Sampaio

Modified:

2021-03-09 16:57 UTC (History)

CC List:

3 users (show)

Fixed In Version:

privoxy 3.0.32

Doc Type:

—

Doc Text:

A flaw was found in Privoxy, where invalid memory access with an invalid pattern passed to pcre_compile() may lead to a denial of service. The highest threat from this vulnerability is to system availability.

Clone Of:

Environment:

Last Closed:

2021-03-08 21:22:49 UTC

Attachments

(Terms of Use)

Add an attachment (proposed patch, testcase, etc.)

Description Pedro Sampaio 2021-03-08 21:22:20 UTC

A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service.

Upstream patch:

https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=28512e5b624

Comment 1 Pedro Sampaio 2021-03-08 21:22:25 UTC

External References:

https://www.privoxy.org/announce.txt

Comment 2 Pedro Sampaio 2021-03-08 21:22:49 UTC

*** This bug has been marked as a duplicate of bug 1935974 ***

Note You need to log in before you can comment on or make changes to this bug.