CVE-2021-20275: 1936666 – (CVE-2021-20275) CVE-2021-20275 privoxy: Invalid read in chunked_body_is_complete()

Bug 1936666 (CVE-2021-20275) - CVE-2021-20275 privoxy: Invalid read in chunked_body_is_complete()

Summary: CVE-2021-20275 privoxy: Invalid read in chunked_body_is_complete()

Keywords:

Status:

CLOSED DUPLICATE of bug 1935974

Alias:

CVE-2021-20275

Product:

Security Response

Classification:

Other

Component:

vulnerability

Sub Component:

Version:

unspecified

Hardware:

All

OS:

Linux

Priority:

medium

Severity:

medium

Target Milestone:

—

Assignee:

Red Hat Product Security

QA Contact:

Docs Contact:

URL:

Whiteboard:

Depends On:

Blocks:

TreeView+

depends on / blocked

Reported:

2021-03-08 21:18 UTC by Pedro Sampaio

Modified:

2021-03-09 17:00 UTC (History)

CC List:

3 users (show)

Fixed In Version:

privoxy 3.0.32

Doc Type:

—

Doc Text:

A flaw was found in Privoxy, where an invalid read of size two may occur in chunked_body_is_complete(), leading to a denial of service. The highest threat from this vulnerability is to system availability.

Clone Of:

Environment:

Last Closed:

2021-03-08 21:19:25 UTC

Attachments

(Terms of Use)

Add an attachment (proposed patch, testcase, etc.)

Description Pedro Sampaio 2021-03-08 21:18:56 UTC

A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service.

Upstream patch:

https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=a912ba7bc9c

Comment 1 Pedro Sampaio 2021-03-08 21:19:00 UTC

External References:

https://www.privoxy.org/announce.txt

Comment 2 Pedro Sampaio 2021-03-08 21:19:25 UTC

*** This bug has been marked as a duplicate of bug 1935974 ***

Note You need to log in before you can comment on or make changes to this bug.