PT-2021-13846

CVE-2021-20215

Published

2021-01-22

Updated

2026-10-31

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Privoxy versions prior to 3.0.29

Description: A flaw in Privoxy can cause memory leaks in the show-status CGI handler when memory allocations fail, potentially leading to a system crash.

Recommendations: For versions prior to 3.0.29, update to version 3.0.29 or later to resolve the issue. As a temporary workaround, consider restricting access to the show-status CGI handler until a patch is available.

Exploitability

Fix

Impacts

Researchers

Msiddiqu

Vendors

Affected products

Weakness enumeration

CWE-401: Missing Release of Memory after Effective Lifetime

Related identifiers

CVE-2021-20215

ALT-PU-2021-1116