PT-2021-13868 · Privoxy+4 · Privoxy+4

·

CVE-2021-20276

·

Published

2021-03-09

·

Updated

2024-10-14

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32
Description: A flaw was found in the software, where invalid memory access with an invalid pattern passed to the pcre compile() function may lead to denial of service.
Recommendations: For versions prior to 3.0.32, update to version 3.0.32 or later to resolve the issue. As a temporary workaround, consider restricting the input to the pcre compile() function to prevent invalid patterns from being processed.

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2021-1574
ALT-PU-2024-13795
CVE-2021-20276
DLA-2587-1
OPENSUSE-SU-2021:0443-1
OPENSUSE-SU-2021:0460-1
OPENSUSE-SU-2021_0443-1
OPENSUSE-SU-2024:11193-1
USN-4886-1

Affected Products

Alt Linux
Linuxmint
Privoxy
Suse
Ubuntu