Summary
Joshua Rogers discovered that Privoxy incorrectly handled memory allocation. An
attacker could possibly use this issue to cause a denial of service. (CVE-2021-44540)
Artem Ivanov discovered that Privoxy incorrectly handled input validations. An
attacker could possibly use this issue to perform cross-site scripting (XSS) attacks.
(CVE-2021-44543)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | privoxy | 3.0.26-5ubuntu0.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | privoxy | 3.0.28-2ubuntu0.2 |
Vulnerabilities 2
-
Unscored —
A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec…
-
Unscored —
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when P…