CVE-2021-20273: Crash can occur via a crafted CGI request if Privoxy is toggled off

Bug 1936658 (CVE-2021-20273) - CVE-2021-20273 privoxy: Crash can occur via a crafted CGI request if Privoxy is toggled off

Summary: CVE-2021-20273 privoxy: Crash can occur via a crafted CGI request if Privoxy …

Keywords:

Status:

CLOSED DUPLICATE of bug 1935974

Alias:

CVE-2021-20273

Product:

Security Response

Classification:

Other

Component:

vulnerability

Sub Component:

Version:

unspecified

Hardware:

All

OS:

Linux

Priority:

medium

Severity:

medium

Target Milestone:

—

Assignee:

Red Hat Product Security

QA Contact:

Docs Contact:

URL:

Whiteboard:

Depends On:

Blocks:

TreeView+

depends on / blocked

Reported:

2021-03-08 21:10 UTC by Pedro Sampaio

Modified:

2021-03-09 17:04 UTC (History)

CC List:

3 users (show)

Fixed In Version:

privoxy 3.0.32

Doc Type:

—

Doc Text:

A flaw was found in Privoxy. A crash can occur via a crafted CGI request if Privoxy is toggled off. The highest threat from this vulnerability is to system availability.

Clone Of:

Environment:

Last Closed:

2021-03-08 21:11:00 UTC

Attachments

(Terms of Use)

Add an attachment (proposed patch, testcase, etc.)

Description Pedro Sampaio 2021-03-08 21:10:15 UTC

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off.

Upstream patch:

https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=e711c505c48

Comment 1 Pedro Sampaio 2021-03-08 21:10:20 UTC

External References:

https://www.privoxy.org/announce.txt

Comment 2 Pedro Sampaio 2021-03-08 21:11:00 UTC

*** This bug has been marked as a duplicate of bug 1935974 ***

Note You need to log in before you can comment on or make changes to this bug.